matrixbnuhs

This skill is essentially a README telling you how to clone and run an external GitHub project. That is coherent with its description, but cloning and running external code can execute arbitrary code on your machine or environment. Before running the commands: (1) inspect the GitHub repo and specific commit/tag you will clone (prefer a pinned commit or release), (2) review package.json and Dockerfile for unexpected postinstall scripts or network calls, (3) avoid installing global CLIs unless necessary—use containers or ephemeral sandboxes instead, (4) run npm install and builds inside a container or VM, (5) verify licensing and project origin. If you want higher assurance, request that the skill bundle include the code (or a signed release URL and checksum) so the skill's contents can be statically reviewed.