install-recommended-skills

SUSPICIOUS. The skill is coherent in purpose, but its sole function is transitive installation of multiple third-party skills from a personal GitHub repo, without version pinning. Data flows stay within official GitHub CLI paths and there is no direct credential exfiltration, but the trust expansion to downstream skills makes the overall risk medium-high.