poteto-help

SUSPICIOUS: the skill’s behavior largely matches its help/documentation purpose and shows no exfiltration or hidden execution, but it tells the agent/user to install a third-party skill repo via an unpinned transitive trust chain. Main concern is supply-chain and inherited-skill trust, not confirmed malicious intent.