skills-discovery

SUSPICIOUS: the skill’s stated purpose matches its behavior, but its main capability is to discover and install other third-party skills, which is a high-risk transitive trust pattern. No direct credential theft or covert exfiltration is shown, yet the installation workflow materially expands the agent’s attack surface and should be treated as medium-high security risk.