find-skills

SUSPICIOUS: the skill is coherent with its stated purpose and uses an official same-org CLI, but its purpose is to discover and install other skills, which creates a transitive trust risk. The main concern is not direct malware behavior here; it is the ability to pull in third-party skills from broad remote sources, especially with non-interactive install flags.