dgrunner-operations

SUSPICIOUS. The skill’s capabilities mostly match its stated purpose and there is no clear credential harvesting or exfiltration behavior, but the exact `@upstand/dgrunner` package and `dgrunner upgrade` provenance were not publicly verifiable from the provided evidence. Operational impact is significant because the skill can interrupt or unregister self-hosted runners, so the main concern is install/update trust and high-consequence administration rather than confirmed malicious intent.