search-skill

SUSPICIOUS: the skill is internally coherent, but its purpose is to search for and install other skills, which creates a transitive trust/supply-chain risk by design. The install/search paths appear consistent with the official skills ecosystem, and the instructions include useful trust gates, duplicate checks, and no-follow handling for untrusted descriptions; however, automatic installation of external skills remains broader than a low-risk helper and warrants medium risk classification rather than benign.