setup

SUSPICIOUS: the setup purpose is mostly coherent, but the footprint is broader than a simple wizard. Main risk comes from transitive installation of many remote skills plus repeated unpinned installers and third-party CLI trust, not from direct credential theft. API keys are routed to expected providers, but the skill materially expands agent trust and local secret exposure beyond a narrow setup task.