ai-recommending

SUSPICIOUS. The core recommendation examples are coherent and mostly benign, but the skill includes transitive installation instructions for additional skills from a personal GitHub repository, which is disproportionate to its stated purpose and raises trust-chain risk. No direct credential theft, secret-file access, or obvious exfiltration behavior is present.