skills-sh-maintainer

SUSPICIOUS: the skill’s core behavior matches a skills-maintenance workflow, but it carries medium risk because it installs/transitively trusts other skills, reads a raw GitHub PAT from a local file, and automates broad rollout across local environments. Data flows stay mostly within expected destinations (GitHub, skills.sh, local skill folders), so this looks more like a risky maintainer utility than confirmed malware.

The supplied fragment is installation and rollout documentation with no direct evidence of malware or data theft. It presents a moderate supply-chain risk because npx retrieves and may execute remote tooling, and the PowerShell example can distribute that content globally or across many repositories. Review and pin the CLI/source versions and inspect installed skill files before execution, especially the referenced synchronization script.