find-skills-for-project

SUSPICIOUS. The skill’s behavior mostly matches its stated purpose and includes sensible vetting guidance, but it materially expands risk by executing an unpinned npm CLI and by installing other third-party skills that will run with full agent permissions. This is not malicious on its face, yet the transitive trust and mutable `@latest` execution make it higher risk than a read-only advisory skill.