cli-anything

SUSPICIOUS: the core purpose is coherent, and the main pip dependency appears official, but the skill materially expands trust by installing additional skills/plugins and enabling autonomous CLI discovery/install. Combined with processing untrusted repos under Bash+Write access, this makes it a medium-risk agent skill rather than benign documentation.