recommend-sku-sizing

The fragment is not evidence of malware, but it describes risky credential handling: retrieved passwords are inserted into a connection string returned to another skill, potentially exposing them through tool or agent logs. Automatic installation of a PowerShell module is an additional supply-chain risk. Ensure the connection string remains local and is not returned through an AI-visible channel, and verify package provenance before installation.