skillshare

SUSPICIOUS. The documented behavior is coherent for a skill-management tool, but its footprint is inherently high risk because it installs and propagates third-party AI skills from arbitrary Git hosts, including with audit-bypass options. The main concern is transitive trust and prompt-injection risk from external skill content, not confirmed malware in this skill itself.