claud3

SUSPICIOUS: purpose and capabilities mostly align, but this skill is primarily a loader stub that tells the agent to install a separate third-party skill from a personal GitHub repo. The documented install path is legitimate, yet the transitive trust and weak provenance make the overall risk medium even without direct malicious behavior in the stub.