skill-installer

SUSPICIOUS: the skill is internally aligned with its stated purpose, but that purpose is inherently high-risk because it installs and trusts other skills from arbitrary GitHub sources. Main concerns are transitive skill installation, mutable GitHub provenance, and prompt-injection exposure from reviewing untrusted SKILL.md files; there is no direct evidence here of credential theft, covert exfiltration, or confirmed malware.