tooluniverse-claude-code-plugin

SUSPICIOUS. The skill’s actions mostly match its stated plugin-install purpose, but it expands trust substantially: it installs a third-party Claude plugin from GitHub, enables optional background auto-updates, and runs a separate PyPI package via uvx that can receive API keys. The install sources are legitimate and publisher-consistent, so this is not confirmed malware, but the transitive trust and credential-forwarding footprint are higher-risk than a simple documentation skill.