textual-tui-skill

SUSPICIOUS: the skill's stated purpose is coherent, and there is no clear credential theft or malicious data exfiltration. However, it mainly acts as a pointer that installs another skill from a personal GitHub repo through a generic CLI, creating meaningful transitive-trust and supply-chain risk; the Python package install is proportionate but unpinned.