anything-to-skill

SUSPICIOUS. The skill’s capabilities largely match its stated purpose, and it includes meaningful safeguards against prompt injection and unauthorized writing. The main risk is operational: it orchestrates many external tools, dynamic dependency/model downloads, browser automation, and even a transitive skill install, which raises supply-chain and execution-trust concerns despite no clear credential theft or malicious exfiltration.