plugin-discovery

SUSPICIOUS: the stated purpose is plugin discovery, but the skill expands into transitive installation of third-party plugins/powers/MCP servers, direct config inspection, and shared-memory storage. Most behavior is plausibly related to setup, yet the unverified marketplace claims and extension-install trust chain make the footprint broader and riskier than a simple discovery helper.