agent-orchestration

SUSPICIOUS: the stated purpose matches orchestration setup, and the visible install command uses an official npm CLI, but the skill’s main action is transitive installation of another remote skill from a third-party GitHub repo plus host init scripts whose contents are not shown. That makes the footprint coherent yet moderately risky from a supply-chain and inherited-permissions perspective rather than overtly malicious.

SUSPICIOUS. The skill’s core behavior is mostly aligned with its stated purpose—delegating bulk implementation to the official Cursor CLI—but it expands trust to a black-box external agent that can autonomously edit files and run shell commands with `--force`. The main concerns are supply-chain hygiene of the preinstalled CLI, prompt/workspace-to-execution risk, and transitive trust to another skill, not confirmed malware or credential theft.