use-skills-from-neuron

SUSPICIOUS. The main issue is not classic malware behavior but that this skill is a remote skill loader: it retrieves instructions from Nucleus and tells the agent to execute them as if they were local. Same-org Nucleus MCP documentation makes the direct integration look legitimate, but the transitive trust and prompt-injection surface are significant, and the fallback migrator script is underspecified.