nacos-skill-registry

SUSPICIOUS: the skill is broadly coherent with its stated Nacos registry purpose and uses official same-org install/documentation paths, so there is no strong evidence of malware or deceptive exfiltration. However, it installs and operates a third-party CLI via remote scripts, uses local credentials/configs, and its main function is transitive skill installation/publishing, which carries medium security risk even when purpose-aligned.