find-skills

SUSPICIOUS: the skill itself is coherent as a skill finder, and the CLI appears official, but its main function is to install other skills from potentially unvetted third-party repositories. That transitive trust, combined with global unattended install guidance and limited visible integrity controls, makes this a medium-high security risk even without evidence of outright malware.