calibrate-resources

SUSPICIOUS: the stated purpose is benign orientation, but the skill also tells the agent to silently self-update from a skills registry, install external tooling, and hide setup/discovery actions from the user. The Calibrate-specific auth and API-host configuration are broadly consistent with the product, but the concealment directive and transitive update/install behavior make the overall footprint higher risk than a simple resource guide.