skill-manager

The skill’s management purpose broadly matches its file and network operations, and the supplied code does not establish credential theft or confirmed malware. Risk is elevated because it installs unverified third-party instructions into agent load paths, uses mutable sources, and trusts an unsanitized skill name in filesystem operations.

This is a skill management script that fetches GitHub archives and copies skill folders into configured directories. Its main security issue is unvalidated skill names and remove arguments used in filesystem paths, which can enable path traversal and unintended file deletion or movement; severity is medium to high depending on invocation and permissions. It contacts codeload.github.com and the GitHub API, but the fragment shows no credential theft or direct execution of downloaded skill content.