discover-azure-skills

SUSPICIOUS: the skill is mostly coherent as a discovery-and-recommendation workflow using official Microsoft GitHub metadata, but it includes transitive skill installation guidance and an unpinned third-party `npx skills add` path. No direct credential harvesting or exfiltration is present, yet the downstream trust chain and inconsistent Claude installation instructions make it medium risk rather than benign.