sync-local-global-agents-skills

SUSPICIOUS: the core symlink-sync behavior matches the stated purpose and requested file access is proportionate, but the skill extends trust to other skills already installed via the skills ecosystem and optionally refreshes remote memorix skills from GitHub raw without stated integrity checks. This is not confirmed malicious, but it creates meaningful supply-chain and transitive-trust risk beyond a simple local linker.