minimax-pdf

SUSPICIOUS: the entry is not overtly malicious, but it mainly serves as a pointer that tells the agent/user to install an upstream skills bundle from a mutable GitHub repo. Same-org provenance reduces concern, yet the transitive installation pattern and lack of pinned, verifiable releases make the trust model weaker than a self-contained benign documentation skill.