dataverse

SUSPICIOUS: the skill’s Dataverse-focused capabilities are mostly coherent and the main CLI comes from official Microsoft sources, but it expands trust by globally installing a whole bundle of additional skills through a third-party skills CLI, uses wildcard/global persistence, and includes unpinned package installs plus fetched helper scripts. This is not clearly malicious, but the transitive installation and persistent agent-wide footprint are disproportionate enough to warrant caution.