install-github-skills

SUSPICIOUS: the skill’s purpose matches its behavior, but its whole function is to install additional third-party skills from mutable GitHub sources, including a personal awesome-list, into the agent’s trusted skills directory. No direct credential theft or overt exfiltration is shown, but the transitive trust chain and unpinned remote sources create meaningful supply-chain risk.