find-skills

SUSPICIOUS: the skill is coherent with its stated purpose, and the CLI/source relationship is verifiable and same-org, so this is not confirmed malware. However, its main capability is transitive installation of other skills from potentially unreviewed external sources, including with `-y` noninteractive install, which meaningfully increases trust and supply-chain risk.