skill-goal-extractor

SUSPICIOUS: the skill's stated purpose is a simple compatibility router, but its real function is to delegate to and potentially install a separate skill from an unverified external README. No direct credential theft or exfiltration is shown, but the transitive trust chain and unverifiable dependency reference make the footprint disproportionate for such a thin wrapper.