key

SUSPICIOUS: the alias skill is internally consistent as a shortcut, but its key behavior is to route execution and installation to another unreviewed third-party skill. The official CLI usage reduces supply-chain concern around the installer mechanism, yet transitive trust in a personal repo remains a meaningful security risk until the target skill is separately reviewed.