skill-creator

SUSPICIOUS: the skill is narrowly a transitive installer, not a direct task skill. Its behavior is coherent with its stated purpose, and the target repository is official Anthropic content, but it relies on an unpinned third-party CLI and creates a trust chain into remotely fetched skill content with documented telemetry. This is better classified as medium supply-chain/transitive-trust risk than malware.