skill-install

SUSPICIOUS: The stated purpose matches the capabilities, and network/data flows stay on official GitHub infrastructure with no direct credential theft or covert exfiltration. However, this skill’s whole function is to install third-party skills from arbitrary repositories, creating a meaningful transitive supply-chain risk that is only partially mitigated by its scanning step; lack of commit pinning and cryptographic verification keeps overall risk in the medium range.