setup

SUSPICIOUS: the main setup command is coherent with the stated purpose, but the fallback path expands trust by globally installing a CLI and then installing a separate remote skill bundle with a wildcard selector. This is not clearly malicious, but it is broader than necessary for simple repository setup and creates medium supply-chain and transitive-trust risk.