omni-github-skills

SUSPICIOUS: the skill’s described behavior is internally consistent, but its core function is to discover and install third-party agent skills from GitHub, creating a transitive trust-chain risk. Install sources appear mostly legitimate and same-org via npm/npx, so this is not confirmed malware, but the combination of community-content ingestion, mutable @latest installers, and local skill installation makes it a medium-high security risk.