world2agent-protocol

SUSPICIOUS: the skill’s stated purpose matches sensor/plugin installation, but its footprint includes high-risk transitive skill installation and an explicit dangerous development-channel load. No clear credential theft or malicious exfiltration is shown, yet execution trust is weak and downstream third-party sensors/plugins materially raise security risk.