youskill-finder

SUSPICIOUS. The core behavior is mostly aligned with its purpose, and the install path uses npm rather than a raw binary or curl|bash. However, it executes remote package code, sends user prompts to a hosted backend, and encourages follow-on installation of additional third-party skills, so the overall risk is medium and mainly supply-chain/transitive-trust related rather than confirmed malware.