skills-search

SUSPICIOUS. The core behavior matches the stated purpose, and the main CLI appears to come from the same publisher via npm rather than an arbitrary host, so this is not confirmed malware. However, the skill grants the agent autonomous shell-based package management and transitive installation of other skills, with unpinned `npx` execution and local filesystem changes, making the overall risk medium-high even though credential theft or overt exfiltration is not evident here.