huawei-cloud-find-skills

SUSPICIOUS: The search/discovery behavior is broadly consistent with the stated purpose, but the skill is mainly a launcher for transitive skill installation. Same-org GitHub sourcing lowers maliciousness concerns, yet the default mirror-based install path, optional third-party ClawHub path, remote content fetching, and delegated execution make this a medium-high security risk rather than benign.