update

SUSPICIOUS: the skill's updater behavior is somewhat aligned with its stated purpose and same-org infrastructure, but it relies on executing an unpinned remote shell script from a mutable branch and triggers broader system changes than just skill reinstall. This looks more like risky install hygiene and overbroad updater scope than confirmed malicious intent.