skill-creator

SUSPICIOUS: The core authoring guidance is coherent and mostly benign, but the skill includes transitive skill installation instructions (`npx skills add <owner/repo>`) that extend trust to unpinned third-party skills with full agent capability inheritance. The official CLI provenance lowers malware concern, yet the combination of mutable `npx` execution, third-party skill installation, and outbound telemetry makes this a medium security-risk skill rather than a purely benign reference.