wasm-gallery

SUSPICIOUS: the stated purpose is coherent, and same-org Ruflo installation evidence reduces classic supply-chain concern, but the skill's main function is to install and publish community WASM agents. That creates meaningful transitive trust and untrusted-content risk, especially with Bash allowed and no visible endpoint, review, or validation details in the skill.