injective-docs-style

SUSPICIOUS: the skill’s stated purpose is coherent and the data flow is limited to documentation review, but it instructs the agent to install other skills from GitHub via the skills CLI. That transitive trust expansion is disproportionate to a simple style-check workflow and is the primary risk, though there is no clear evidence of credential theft, malware, or malicious exfiltration.