cli-skill-collector

SUSPICIOUS. The skill is internally coherent and uses an official same-project npm install plus local OmniRoute APIs, so it is not confirmed malware. However, its main function is transitive installation of third-party GitHub skills into agent environments, which materially expands trust and introduces indirect prompt-injection and supply-chain risk beyond a normal documentation skill.