agent-reach

SUSPICIOUS: the skill’s broad web-reading purpose mostly matches its capabilities, but it expands into authenticated channel setup and public posting, which raises scope and real-world action risk. The install path is not overtly malicious, yet it depends on multiple upstream tools and raw GitHub guidance, so overall risk is moderate rather than benign.