find-skills

SUSPICIOUS: the stated purpose matches discovery/installation, and the `npx skills` CLI appears official, so this is not outright malicious. However, the skill’s core function is transitive installation of third-party skills, with unpinned CLI execution and support for broad install sources, making the overall trust footprint higher than a simple discovery helper.