cli-hub-meta-skill

SUSPICIOUS. The skill’s purpose matches its behavior, and the primary `cli-anything-hub` installer appears legitimately published with good provenance. The main risk is proportionality and transitive trust: this meta-skill is designed to discover and install many downstream CLIs from a broad ecosystem, including contributor-maintained packages and guidance from a mutable CDN-hosted catalog. That makes it a high supply-chain risk skill even though there is no strong evidence of malware or credential theft in the provided content.