light-tool-selection

SUSPICIOUS: the skill’s stated purpose is coherent, but it persistently steers the agent toward installing external skills, MCP servers, and vendor tools, creating a transitive trust and supply-chain risk disproportionate to a simple tool-selection helper. No confirmed malware or direct credential theft is present, but the always-on scope plus third-party installation guidance makes it medium risk.