find-plugins

SUSPICIOUS: the stated purpose is coherent, and the named GitHub tooling is official, but the skill is a transitive plugin installer that helps an agent discover and install arbitrary third-party GitHub code into DSH. The biggest risk is supply-chain and trust expansion, not confirmed malware; final installer behavior is unverifiable from the provided excerpt because `references/install-methods.md` and the search script were not included.