rust-skill-creator

SUSPICIOUS: The skill’s main behavior matches its stated purpose, but it expands agent capabilities by generating new skills from remote content and depends on unverified local tooling/commands. No credential harvesting or obvious exfiltration is shown, yet the combination of transitive skill creation and external-content ingestion creates meaningful medium risk.