my-cubrid-skills-create

SUSPICIOUS: the skill’s main behavior is coherent with its purpose, but it delegates to an unverified `/skill-creator` command and explicitly creates installable downstream skills, creating a transitive trust risk. No clear credential theft or exfiltration is present, so this looks like a risky workflow skill rather than confirmed malware.