skill-installer

SUSPICIOUS: the skill is internally consistent with its stated purpose, but that purpose is inherently high-risk because it installs other skills and extends the agent’s behavior through a transitive trust chain. Same-org marketplace documentation lowers direct malware concern, but lack of pinned, signed, or otherwise immutable downstream installs keeps overall risk elevated.