gm-skill-manager

Mostly purpose-aligned administrative skill for skill inventory and lifecycle management. The main concern is not malware but transitive supply-chain risk: it can install remote skills and invoke external/native installers, so misuse or untrusted targets could affect the agent environment. No clear credential theft, covert exfiltration, or deceptive behavior is present in the provided content.