related-skill

SUSPICIOUS. The skill is coherent as a discovery/installer tool, but its main function is transitive skill installation, which imports unreviewed capabilities into the agent. Broad Bash permission, repeated npx installs, and the unexplained belt-sh/cli recommendation raise supply-chain and trust-chain concerns beyond a normal documentation skill.