skill-maker

SUSPICIOUS: the skill’s stated purpose mostly matches its capabilities, and there is no credential harvesting or untrusted binary install. The main risk is indirect prompt injection: it pulls untrusted web content and converts it into persistent skill instructions that can influence future agent behavior, while also writing and syncing those files locally.