tech-debt

SUSPICIOUS: the core purpose is benign, but the skill expands its footprint by directing the agent to install external skills via a repo-local, non-verifiable installer path instead of the documented public package-manager workflow. There is no direct credential theft or exfiltration in the visible text, but the transitive skill-install behavior makes the trust model disproportionate and high risk.