skills-store

SUSPICIOUS: the skill is purpose-aligned with a PostHog-hosted skills store and uses same-org infrastructure, but its core behavior is high-trust delegation to remote skill content. The main risk is transitive instruction loading and prompt-injection exposure from fetched skills, plus write-capable management actions over shared team assets.