skill-installer

SUSPICIOUS: the GitHub-side behavior is broadly consistent with the stated purpose, but the skill's primary function is transitive installation of third-party skills, which materially expands trust. Use of a third-party marketplace is proportionate for discovery but adds external data-flow risk, and the unseen script leaves token handling and exact install behavior unverifiable.