simplify

SUSPICIOUS: The core simplify workflow is benign and proportionate, but the skill crosses its boundary by instructing transitive installation of an external skill through a custom local installer whose provenance and behavior are not visible here. No direct credential theft or exfiltration is shown, but the hidden supply-chain path raises meaningful security risk.