study-habits

SUSPICIOUS: the visible skill behavior is benign and local-only, but install provenance is inconsistent. Third-party `npx skills add` distribution from repos unrelated to the stated author makes the supply chain insufficiently trustworthy even though there is no direct evidence of credential theft or malicious payloads in the provided content.