agent-skills-framework

SUSPICIOUS: the skill’s overall purpose is coherent and there is no clear credential theft or malware behavior, but it carries moderate risk from transitive skill installation and somewhat unclear publisher provenance (ara.so branding vs personal GitHub repo). Most flagged items are documentation-context examples, not active exfiltration or hidden execution.