work-automation-kit

SUSPICIOUS. The skill is coherent as a workflow installer, but its main function is transitive installation of multiple external skills via unpinned latest commands, including a community repository. That makes it a medium-high trust and supply-chain risk even without direct evidence of credential theft or malicious payloads in this file.