connectory-setup

SUSPICIOUS: the core purpose is coherent and the Connectory repo/endpoints look legitimate, but the skill installs additional skills through an unrelated third-party `npx skills` CLI and expands agent trust transitively. Main risk is supply-chain and transitive capability extension, not confirmed malware.