agent-messaging

SUSPICIOUS. The core messaging capability matches the stated purpose, and same-org GitHub provenance suggests this is not overtly deceptive. However, the install path relies on clone-and-execute from a mutable repository instead of a verifiable package release, and the skill processes untrusted message content without explicit safeguards against prompt injection. Risk is moderate rather than malicious.