antigravity-lazy-packs

SUSPICIOUS: the skill is internally coherent as an installer, but its real function is to transitively install and execute other third-party skills from a personal GitHub repo. The official `npx skills` path lowers concern somewhat, yet the manual fallback and inherited trust chain make this a medium-high supply-chain risk rather than a benign workflow helper.