skill-seekers

SUSPICIOUS. The wrapper skill is mostly benign and does not itself exfiltrate data or execute code, but its purpose delegates to an external personal project whose core function is to transform untrusted content into new agent skills. That creates medium supply-chain and indirect prompt-injection risk disproportionate to the minimal in-skill safeguards.