add-doc-updater

SUSPICIOUS: the behavior mostly matches the stated purpose of adding a docs updater, but it introduces medium supply-chain risk by operationalizing downloads from arbitrary user-provided archive URLs and propagates changes into other skills. No clear credential theft, hidden exfiltration, or malicious payload execution is present.