swagger2skill

SUSPICIOUS: the skill's core purpose is coherent, but it combines untrusted remote spec ingestion, code generation, file writes, command execution, and optional installation of the generated skill into the agent. No clear credential theft or malicious exfiltration is present, yet the transitive skill-install and prompt-injection surface make it medium risk rather than benign.