database-schema-designer

SUSPICIOUS: the skill’s stated purpose is a benign schema-design assistant, but its actual permission footprint is much broader because it grants unrestricted shell execution without any documented need, constraints, or explicit data-flow boundaries. No direct malware, installer abuse, or credential exfiltration is shown, but the capability-to-purpose mismatch makes the skill higher risk than its description suggests.