prisma-next-extension-upgrade

SUSPICIOUS. The skill’s capabilities mostly match its stated upgrade purpose, but it requires unpinned same-org skill refresh/install and transitive skill loading before execution, then runs bundled scripts and commits changes automatically. This looks more like a legitimate but moderately risky maintenance skill than malware; the main concerns are mutable install trust and inherited trust from additional skills.