taste-skill

SUSPICIOUS: the stub is coherent with its stated purpose, but it primarily serves as a transitive installer for a separately named full skill from a personal GitHub repo. No clear malware or credential theft is shown, yet the remote skill-install trust chain and unpinned GitHub source make this a medium-risk skill.