find-skills

SUSPICIOUS: the skill is coherent with its purpose, and the core CLI appears official, but its primary function is to search for and install third-party skills from a broad ecosystem. That transitive installation model, combined with skipped confirmations and limited provenance guarantees for downstream skills, creates medium-high security risk without clear evidence of confirmed malware.