create-skill

SUSPICIOUS: The stated purpose matches the actions, but the skill’s main function is to propagate additional skill content through a transitive install chain from a personal GitHub repo into multiple agents globally. The CLI appears legitimate, yet the repo payload is not independently verified or pinned, so the dominant risk is transitive trust and broad rollout scope rather than confirmed malware.