agent-skills

SUSPICIOUS due to transitive trust: the skill’s purpose is coherent, but it instructs installation of additional skills from a third-party GitHub repo through the Skills CLI. This is an official install mechanism, so it is not malware evidence, but it meaningfully expands trust and should be treated as medium risk until the referenced sub-skills are reviewed.

SUSPICIOUS: the skill is mostly a launcher/catalog for installing other skills from an unverified third-party repo through an official CLI. The installer provenance is reasonably legitimate, but the core behavior is transitive trust delegation to unpinned external skill content, which is disproportionate and should be treated as medium-high risk.