taxue-upgrade

SUSPICIOUS. The stated purpose matches a skill updater, and local access to ~/.claude/skills/ is proportionate, but the actual upgrade trust chain is under-specified: no canonical remote source, no pinned artifacts, and no concrete verification method are provided. This is not confirmed malware and shows no credential theft behavior, but it does modify persistent agent instructions based on unspecified remote content, so the security risk is medium.