vet-skill-idea

SUSPICIOUS: the core skill is a benign evaluation guide, but it recommends installing another skill from an unverified third-party repo, creating transitive trust and unpinned supply-chain risk. No direct credential harvesting, exfiltration, or hidden execution is present in this skill text.