threenix-add-linked-particles

SUSPICIOUS: the stated purpose fits the capabilities, but the skill places high trust in a remote MCP/plugin source that can supply code and dependency versions for direct local installation. With unclear same-org provenance between Threenix branding and the referenced GitHub owner, this is a supply-chain and transitive-trust risk rather than confirmed malware.