ln-823-pip-upgrader

SUSPICIOUS: the skill’s core behavior matches its stated purpose, but it has moderate risk from mutable raw GitHub fallback fetches and from using external documentation/search content while retaining command execution and file-write capabilities. No credential harvesting, exfiltration endpoint, or fundamentally incompatible behavior is evident.