threejs-claude-skill-package

SUSPICIOUS: this skill is mostly a bootstrap stub that instructs the agent to install another skill through an external CLI/registry. There is no clear credential theft or exfiltration, but the transitive skill installation and delegated trust make the footprint broader than a normal Three.js guidance skill.