context-engineering

SUSPICIOUS: the core skill content is benign documentation, but it includes transitive installation of external skills through an unseen local installer and registry. Because the install path and external skill provenance are not verifiable from the provided content, the main concern is supply-chain and trust-boundary expansion rather than direct malware or exfiltration.