k2f-sales-deck

SUSPICIOUS: the stated purpose is coherent, but the skill requires transitive installation of another skill from a third-party personal GitHub repo via the skills CLI. There is no direct credential harvesting or exfiltration in this skill text, so this is not malware, but the unreviewed inherited trust makes it a medium security risk.