unit-3-hyprland-nier-rice

SUSPICIOUS: the skill's functionality matches its desktop-theming purpose, but the recommended install path is a remote bash execution from an unrelated GitHub source relative to the stated publisher, with no integrity verification. No clear credential theft or exfiltration is present, so this looks more like medium supply-chain/install-trust risk than malicious intent.