skills-cli

SUSPICIOUS: the skill is internally consistent as a CLI usage guide and its main installer is official, but it teaches transitive installation of third-party skills from arbitrary remote sources into agent trust boundaries. The main risk is not the guide itself stealing data; it is enabling broad, non-interactive loading of unreviewed skills that can later inherit agent permissions.