skill-lookup

SUSPICIOUS: the stated purpose matches the behavior, but the skill’s footprint is inherently risky because it installs third-party skills from an external registry into the agent’s local skill directory without visible provenance checks, signatures, or content review. The main concern is transitive trust and indirect prompt injection from installed skills, not confirmed malware in this lookup skill itself.