work-automation-kit

SUSPICIOUS: the skill is a meta-installer whose core function is to fetch and add multiple external skills via an unpinned `bunx skills@latest` path. The main concern is transitive trust and unclear downstream permissions, not confirmed malware or direct credential theft in this file.