install-companion-plugins

SUSPICIOUS: the skill is coherent in purpose, but its main function is transitive installation of other plugins, including ones that can send email or connect external systems. The install mechanism is official Anthropic infrastructure, so this is not confirmed malware, but it materially expands the agent's trust boundary and should be treated as medium-high risk until each downstream plugin is separately reviewed.