use-skill

SUSPICIOUS: the skill's purpose matches its capabilities, and its GitHub/gh data flow is internally consistent and same-org. However, it is a remote code/instruction loader for other skills, follows nested skill links, and executes fetched content under current authority with default trust, creating meaningful transitive trust and prompt-injection risk despite using official infrastructure.