setup-chiptus-env

SUSPICIOUS: the skill is mostly coherent with its stated setup/scaffolding purpose, and the upstream dependency appears to be the same publisher's official skill pack. The main concern is transitive trust: it instructs installation and later reliance on another skill set with broad scope, and scaffolds autonomous repo actions through additional skills. No direct credential theft, hidden execution, or exfiltration is evident here.