skilly-cli

SUSPICIOUS: the skill is coherent with its stated purpose of managing skills, but its purpose inherently requires transitive installation of additional skills and execution of remote CLI code. Risk is elevated by the unpinned GitHub `npx` install path and the ability to add arbitrary external skills via URL; these are supply-chain and trust-chain risks rather than confirmed malware.