bulk-github-skills-downloader

SUSPICIOUS. The downloader's network access and GitHub token use fit its stated purpose, but its real risk is transitive: it bulk-ingests untrusted third-party skills and consolidates them for future agent execution. No direct credential theft or exfiltration is evident, but the skill materially increases supply-chain and prompt-injection exposure.