auto-updater

SUSPICIOUS. The skill's purpose matches its behavior, but its footprint is high-risk because it automates registry-wide and agent-wide updates on a schedule without per-action approval. The main concern is supply-chain and transitive trust expansion, not confirmed malware or credential theft.