shell

SUSPICIOUS: the stated purpose is benign and the content looks like a documentation skill, but the trust chain is weaker than claimed. It packages Google guidance from an unrelated GitHub org and installs through a separate third-party CLI, so the main risk is transitive install/provenance rather than malicious functionality.