find-skills

SUSPICIOUS: the skill’s purpose is coherent, and the referenced CLI appears official and documented, so this is not malware. However, it exists to search for and install additional skills from an external ecosystem, creating significant transitive trust and supply-chain exposure; the global noninteractive install path increases that risk.