helios-skills

SUSPICIOUS due to transitive trust, not because of overt malicious behavior. The skill is internally consistent with a Helios skill catalog and uses same-project install paths, but its main function is to cause the agent to install additional remote skills through a third-party CLI, expanding trust beyond the reviewed file.