skill-lookup

SUSPICIOUS: the skill's purpose is coherent, but it is a transitive skill installer that imports untrusted third-party instructions into Claude's skills directory with no provenance or integrity verification. Data flow is same-service and proportionate, so this is not confirmed malware, but the trust model creates meaningful supply-chain and prompt-injection risk.