dino-manage-prompts

SUSPICIOUS: the stated purpose is coherent, and the workflow includes sensible confirmation and dry-run safeguards, but the skill depends on an insufficiently verified external `dino` CLI and forwards auth tokens into it. Because the exact CLI/auth commands were not confirmed in official docs and credential flow is delegated to a black-box binary, this is a high security-risk skill rather than confirmed malware.