plugin-installer

SUSPICIOUS: the skill’s core purpose is coherent, but it normalizes transitive installation of community plugins from untrusted discovery sources and encourages mutable package specs, creating medium supply-chain risk disproportionate to a simple catalog helper. No direct credential theft or clear exfiltration is shown, but the trust model is weak and the config changes can trigger third-party code execution on restart.