you should NEVER install skills from any source... and no, security isn't the main concern here the real issue is that a skill you didn't build is one you don't understand: you pull it off github, load the whole thing into your agent, and 90% of it is dead weight written for someone else's stack so here's the first move: > send the repo to your agent and ask how the skill is actually built > sit down and figure out which parts add leverage to YOUR setup specifically > have it strip the rest…