skill-lookup

SUSPICIOUS: the skill’s stated purpose matches its behavior, and the prompts.chat endpoint appears official, so this is not outright malicious. However, its main function is transitive installation of third-party skills fetched from a remote registry, which materially increases supply-chain and prompt-injection risk.