find-skills

SUSPICIOUS. The stated purpose matches the capability to search and install skills, but the footprint is high-risk because the skill's main action is transitive installation of third-party skills from marketplaces and GitHub. The install path for SkillKit itself is reasonably legitimate via npm, yet the use of mutable `@latest`, broad community sources, and a mismatched browse domain reduce trust. Main concern is not confirmed malware in this skill, but that it acts as a loader for unreviewed downstream skills.