use-findskill

SUSPICIOUS: the documented commands are coherent for a meta-skill, but its core behavior is transitive installation of other skills and reading their instructions, which materially expands trust to third-party content. No direct malware or exfiltration is shown here, yet the custom API override and skill-to-skill installation model make this a medium-risk supply-chain skill.