k2f-invitation

The visible invitation-writing instructions are benign and well-scoped, but the skill is not self-contained: it requires installing a separate third-party skill that will run with the agent's permissions. That transitive trust makes the package suspicious rather than malicious; risk is medium because the main security concern is delegated execution, not direct credential theft or exfiltration in this skill.