Whispers from the Star CN

Technical risk: very low — this skill is instruction-only and only references local markdown files, so it does not request credentials, install packages, or contact external endpoints. However, consider these non-security things before installing: 1) Source provenance: the skill's source/homepage are unknown — if you need a trustworthy author or license (e.g., for commercial use or redistribution), ask the publisher for attribution and licensing. 2) Content review: review the narrative content for any sensitive, copyrighted, or policy‑relevant material you don't want in your workspace. 3) Autonomous invocation: the skill may be invoked by an agent (disable-model-invocation is false by default). Although this skill has no elevated privileges, confirm your agent's behavior policy if you don't want automated runs. 4) Test in a sandbox: because the registry metadata shows an unknown owner and no homepage, try it in a non-production/sandbox agent first to confirm behavior and to inspect outputs. Overall: low security risk but check author/license and confirm you’re comfortable with an unverified content source.