sync-template

SUSPICIOUS: the skill is mostly aligned with its stated template-sync purpose and uses official GitHub endpoints, but it pulls mutable remote content from an only partially verifiable upstream repo and installs that content into global Claude skill/command locations. The main risk is supply-chain and transitive trust expansion, not clear malware or credential theft.