agent-update-manager

SUSPICIOUS: the updater purpose partially fits package/version checks, but the skill expands into automatic installation and execution of multiple external MCP tools with unpinned/latest commands and vague credential-file scanning. Data flows are not overtly exfiltrative, yet the scope and supply-chain trust model are broader than necessary for a safe update manager.