teach-me

SUSPICIOUS: the overall purpose is coherent for a course-building skill, but it has a non-trivial footprint: broad web ingestion, parallel agent orchestration, local file writes, shell execution, npm installation, and a third-party CDN download. The main concern is indirect prompt injection from untrusted research content combined with execution/write capabilities; supply-chain risk is moderate rather than malicious because installs are largely standard developer tooling and no credential forwarding is shown.