find-skills

SUSPICIOUS: the skill is internally consistent, but its main function is transitive installation of other skills from a broad ecosystem, which materially expands trust. The skills.sh CLI appears official, and skillsmp.com use is first-party and aligned with purpose, so this is not confirmed malware; however, global no-prompt installation and downstream skill loading make the overall risk medium-high.