flutter-upgrade-creator

SUSPICIOUS: the skill’s purpose and capabilities mostly align, and its web/data flows point to official Flutter/Dart/GitHub resources rather than credential-harvesting endpoints. The main risk is that it is a meta-skill creating another skill that can later execute commands and open PRs, so the trust boundary expands even though there is no strong evidence of malware or deceptive exfiltration.