skill-router

SUSPICIOUS: the skill itself is locally scoped and does not exfiltrate data or install anything, but its stated purpose is to broker trust to any other installed skill regardless of publisher. That transitive trust expansion is the main security concern; otherwise the footprint is modest and aligned with local skill discovery.