alert-manager

SUSPICIOUS: the provided file is a benign-looking redirect, but its primary function is to trigger transitive installation of another skill via an unpinned `npx` CLI and a personal GitHub repo. There is no direct credential theft or exfiltration shown here, so it is not confirmed malware, but the trust chain and remote install behavior make it medium-high risk.