find-skills

SUSPICIOUS: the skill is coherent with its stated purpose and uses official same-org discovery/install infrastructure, so it is not malicious. However, its main function is to discover and install additional skills, creating inherent transitive trust risk, especially when installing third-party skills with noninteractive flags.