download-source

MALICIOUS: the skill’s only function is to fetch arbitrary remote shell code and execute it in the current shell from an unverifiable source. This footprint is fundamentally incompatible with a benign standalone skill and creates immediate RCE and follow-on credential theft risk.