anti-slop-skill-picker

SUSPICIOUS: the skill's stated purpose matches its behavior, but its footprint is to broker trust into many third-party skills and installers. It is not directly malicious or self-executing, yet the catalog includes multiple high-risk install paths (clone-and-run scripts, direct GitHub skill installs, unpinned latest fetches), so the overall risk is driven by transitive trust and supply-chain exposure rather than covert behavior.