find-agent-skills

SUSPICIOUS: the stated purpose is coherent, but the skill’s footprint centers on recommending and relaying installation of third-party skills from a non-official registry, creating transitive supply-chain and prompt-injection risk. No direct malware behavior is shown, but recommendations from this workflow should be treated as medium-risk unless each external skill is independently verified.