product-analytics

Mostly a benign documentation skill for product analytics, but it contains out-of-scope operational behavior: scanning local skill directories and offering transitive installation of other skills via an external CLI. That makes it suspicious rather than malicious.