find-skills

SUSPICIOUS: the stated purpose matches the capability, and the core CLI appears official, but this skill’s main function is to discover and install additional skills from potentially unverified third-party sources. That creates a transitive trust chain and broadens the agent’s effective permissions, especially with global non-interactive installs.