cc-switch-cli

SUSPICIOUS: the skill’s core capabilities mostly fit its stated purpose, but it expands trust significantly through an unpinned curl|bash installer, community skill installation, arbitrary provider endpoints, and user-defined WebDAV sync targets. This is not confirmed malware and there is no hidden credential theft signal, but the footprint is broader and riskier than a simple config helper.