related-skill

SUSPICIOUS: the stated purpose matches the behavior, but the behavior is inherently high-trust because it installs other skills. The main risk is transitive trust and broad shell permission via `npx skills *`, not direct malware behavior in this file.