lang-upgrade

SUSPICIOUS. The skill’s behavior mostly matches its stated purpose as a self-updater, and data flows stay on GitHub rather than an exfiltration service. However, it performs unpinned remote replacement of local agent skills from a low-reputation personal repo and also recommends transitive wildcard skill installation, creating medium supply-chain risk despite no clear credential theft or overt malicious behavior.