find-skills-combo

SUSPICIOUS: the skill's stated purpose matches its behavior, but its main function is to discover and install other skills, including third-party ones, and it explicitly suggests skipping confirmation. The CLI provenance looks official, so this is not confirmed malware; the main concern is transitive trust and reduced-install-approval safeguards.