agentation

SUSPICIOUS. The skill’s stated purpose and core capabilities are broadly coherent, and its main packages appear to be official to the named project. However, it expands trust to unrelated third-party CLIs (`add-mcp` and `skills`) and explicitly performs transitive skill installation, which raises meaningful supply-chain risk even without evidence of overt credential theft or malicious exfiltration.