jeo-skill

SUSPICIOUS: the skill is coherent with its stated purpose as a catalog/install helper, but that purpose itself creates meaningful transitive-trust risk. Provenance is partly reassuring for the `skills` CLI, yet the skill primarily brokers installation of other skills from external sources, so overall risk is high despite no direct credential theft or exfiltration signals.