add-remote-skill

SUSPICIOUS: the stated purpose matches the behavior, and install sources are mostly standard, but the skill's core function is to import other skills from arbitrary GitHub repositories. That transitive skill-installation behavior is inherently higher risk because unreviewed remote skills can later gain broad agent influence even though this skill itself does not exfiltrate data or harvest credentials.