remofirst-rate-limits

SUSPICIOUS: the visible content is mostly benign documentation, but the skill is over-permissioned for its stated purpose and relies on a separate auth skill distributed via mutable raw GitHub content. No direct exfiltration or confirmed malicious behavior is shown, yet the transitive trust and unnecessary Bash network/install capability make the overall skill medium risk.