skillneed

SUSPICIOUS. The stated purpose is coherent, but the skill's main action is to drive installation of another remote skill, creating transitive trust and supply-chain risk. Because the install path is documented and not a curl|bash payload, this is not malware, but it is a medium-risk skill due to unpinned remote content and unverified target-repo ownership.