develop-with-workflow

SUSPICIOUS. The skill’s capabilities fit its stated purpose, and the install path appears to use legitimate npm/GitHub skill infrastructure rather than covert payload delivery. The main concern is transitive trust: it instructs the agent to install and execute multiple external skills, some from a third-party repo, with loose version pinning. No credential harvesting, hidden exfiltration, or malicious data routing is evident, but the external-skill chain makes this a medium-risk development skill.