openpress-plugins

SUSPICIOUS: the skill is coherent as an OpenPress plugin broker, but its main behavior is to steer the agent toward installing and invoking third-party companion skills from personal GitHub repositories. That transitive trust and weak install provenance create meaningful supply-chain risk even though the skill itself does not directly exfiltrate data or request credentials.