skills-update

No direct malware, credential theft, data exfiltration, persistence, destructive behavior, or obfuscated payload is present in the supplied documentation. The primary security concern is the recommended `curl | bash` installation flow from an unpinned GitHub `main` branch, which can execute arbitrary repository changes with the user's shell privileges. The actual installer and update implementation were not supplied, so their behavior cannot be fully assessed.