manage-skills

SUSPICIOUS: the stated purpose matches skill management, but its primary capability is installing additional third-party skills through a weakly verified CLI and community/untrusted sources. The main risk is transitive trust and future privilege inheritance, not confirmed malware or direct exfiltration in this file.