accessibility-agents

SUSPICIOUS: the stub is primarily a transitive installer that tells the agent to fetch another skill from GitHub through a third-party CLI. The sources are relatively legitimate (official npm/GitHub tooling, public same-org repo), so this is not malicious, but the unpinned remote install and trust delegation make it medium risk.