code-quality-code-review-checklist-cpp

SUSPICIOUS. The visible skill content is a harmless C++ code-review checklist with no credential access, code execution logic, or exfiltration. Risk comes from transitive trust: it instructs installation through the official `skills` CLI into a third-party personal repository, with unpinned CLI execution and no strong provenance guarantees for the skill content itself. This is medium risk, not malware.