learn-agent-skills

SUSPICIOUS. The skill's purpose and capabilities mostly align as a training tutor, but its fallback to unpinned raw GitHub lesson content and its instruction to install/use other skills create meaningful supply-chain and indirect prompt-injection risk. It does not show strong signs of credential theft or covert exfiltration, but it is not low-risk.