open-source-management

SUSPICIOUS: the main skill content is a benign OSS-management guide, but it includes a transitive skill installation pattern that does not strictly belong to its stated purpose. The installer path is official and documented, which reduces supply-chain severity, yet recommending third-party companion skill installs based on local directory inspection adds avoidable trust expansion and moderate security risk.