plugin-recommender

SUSPICIOUS. The skill is broadly aligned with its stated plugin-recommendation purpose, but that purpose itself entails medium supply-chain and transitive-trust risk: it searches untrusted external content, executes discovery CLIs, and surfaces install commands for third-party plugins. I found no clear malicious exfiltration or deceptive endpoint routing, so this is not confirmed malware; the main concerns are marketplace/plugin installation risk, indirect prompt-injection surface, and runtime execution via `npx --yes` during discovery.