upstream-sync

SUSPICIOUS: the skill’s purpose broadly matches its capabilities, but it grants an AI agent the ability to pull untrusted upstream repository content and apply local code/file changes, with moderate supply-chain and indirect prompt-injection risk. No direct credential harvesting, exfiltration endpoint, or malicious installer is evident from the supplied text, but the unseen upstream registry and live unpinned sync behavior keep risk above benign.