tab-accordion

SUSPICIOUS. The skill is not directly malicious and does not request secrets or route data to odd endpoints, but its sole purpose is to redirect the agent to install another skill from a personal GitHub repo through the skills CLI. That transitive trust is disproportionate for a deprecated compatibility entry and raises medium risk even though the installer itself appears official.