init-project

SUSPICIOUS: The stated purpose matches project setup, but the skill's footprint is dominated by transitive installation of multiple third-party agent skills and tools. The biggest risk is not direct exfiltration but delegated trust: it pulls mutable installer code and then installs other skills that gain agent capabilities without separate review.