li-upgrade

Suspicious rather than malicious. The skill’s behavior matches its stated purpose of upgrading li-skills, and it uses the officially documented skills CLI workflow. The main risk is transitive trust: it updates from a mutable personal GitHub repo via unpinned `npx`/skills commands, which is proportionate to the purpose but still medium risk supply-chain exposure.