team-skills

SUSPICIOUS: the skill’s purpose matches its behavior, but it acts as a transitive skill installer and fetches remote skills from manifest URLs without strong provenance or integrity controls. Risk is driven by installing unreviewed downstream skills, not by direct malware behavior in this skill text.