skill-installer

SUSPICIOUS: the stated purpose matches installing skills, but the trust model is weak. It relies on an unverifiable local installer script, installs arbitrary third-party skills from mutable GitHub sources, and creates a transitive trust chain into the agent runtime; these are high supply-chain risks even though there is no confirmed credential theft or overtly malicious payload in the text shown.