prisma-next-extension-upgrade

SUSPICIOUS. The skill’s core capabilities fit its stated upgrade purpose and it does not show credential theft or off-purpose exfiltration, but it expands trust by instructing the agent to install additional skills and refresh from mutable same-org GitHub sources (`main`/`latest`), including an archived Prisma Next repo. This is better classified as a medium supply-chain/transitive-trust risk than malware.