jt-find-skills

SUSPICIOUS. The skill’s purpose mostly matches its behavior, but its footprint is somewhat over-broad: it scans many hidden home directories and suggests transitive installation of third-party skills. Data flows stay within the official skills ecosystem and it explicitly avoids auto-installation, so this is not malicious, but the transitive trust and broad local discovery make it medium risk.