rightcode-find-skills

SUSPICIOUS: the stated purpose matches the capability, but the skill primarily acts as a broker for installing additional skills from third-party sources. Because it creates a transitive trust chain and can install with skipped confirmations, the main issue is medium-high supply-chain and permission inheritance risk rather than confirmed malware.