enhance-prompt

SUSPICIOUS. The skill’s stated purpose is benign, but the local entry mostly serves as a pointer to install a broader upstream bundle through transitive npx/skills tooling. Publisher legitimacy appears plausible, so this is not malware, but the upstream URL mismatch and delegated install path make the skill less trustworthy than a self-contained catalogue entry.