agile-proto

SUSPICIOUS. The skill’s core purpose is coherent, and there is no direct credential theft or hidden exfiltration, but it expands trust by instructing installation of another skill and relies on mutable remote browser assets from a personal GitHub repo via jsDelivr `@main`. Risk is mainly supply-chain and transitive-trust, not confirmed malware.