rock-cli

SUSPICIOUS. The skill’s operational scope matches a platform CLI guide, but its install and update trust are disproportionally risky: an unverifiable remote installer executed via curl-to-shell over HTTP, plus opaque self-update behavior. Credential handling is broad but mostly consistent with the stated purpose; the main concern is the unverified binary/script supply chain rather than confirmed malware.