padosoft-skills-router

SUSPICIOUS: the skill's purpose matches its behavior, but that behavior is primarily to install other skills and it includes curl|bash from a raw GitHub script plus repeated downstream skill-install instructions. There is no direct credential theft or exfiltration, but the transitive trust chain and remote installer make it medium risk rather than benign.