find-skills

SUSPICIOUS. The official CLI provenance is reasonably verifiable, so this is not confirmed malware, but the skill’s core function is to discover and install other skills from a broad ecosystem, including potentially unverified third-party sources. That creates a high transitive-trust and supply-chain risk disproportionate to a simple 'find skills' helper, and the extra wiki-writing behavior further broadens scope.