skill-factory

总体偏可疑但不恶意。该技能目的与主要能力基本一致：从 GitHub 生成本地 Skill 骨架；未见明显凭据窃取、隐藏执行或异常外传。但它会摄入不受信任的仓库内容并据此生成本地代码/技能，且支持完整导入与 clone，缺少来源验证与内容约束，因此存在中等供应链和间接提示注入风险。

The code is a GitHub repository importer rather than apparent malware. It performs expected network retrieval and local file creation, with no evidence of data theft, persistence, credential access, obfuscation, or unauthorized remote control. However, it imports arbitrary untrusted files, can recursively delete an existing destination during clone fallback, and lacks explicit path traversal containment checks. The optional removal of source metadata reduces provenance. The undefined `epilog` variable is a functional error. Review imported repository contents before use and restrict or validate the output path.