find-skills

SUSPICIOUS: the skill's purpose mostly matches its behavior and the core CLI appears official, but it is a transitive installer skill that can globally add arbitrary third-party skills with skipped confirmation. The main risk is delegated trust expansion, not overt malware or credential theft.