minecraft-orchestra

SUSPICIOUS: the orchestration purpose is plausible, but the skill primarily acts as a transitive installer for many other third-party skills from a personal repo, including an overly broad `--all` option. The install path is official, so this is not confirmed malware, but the trust expansion and downstream credential setup make it a medium-risk skill.