skills-manager

BENIGN core purpose with meaningful security risk. The skill is internally consistent and uses an official, documented CLI, but its whole job is transitive skill installation and lifecycle management, so it inherently extends trust to third-party skills and performs persistent environment changes non-interactively. Medium risk from supply-chain and transitive-install behavior, not evidence of malware.