maintain-skills

SUSPICIOUS: the skill is coherent with its stated purpose, but that purpose is inherently high-trust because it installs and manages other skills from external repos and chains into other skills. The main concern is transitive trust and mutable supply chain, not confirmed malicious behavior or hidden exfiltration.