2

This skill appears safe from a security standpoint because it is instruction-only, requests no credentials, and has no install steps. Before installing, consider: (1) provenance — the skill lists no homepage and the owner ID is an opaque identifier, so if you require traceability prefer skills with a visible source/repository; (2) content accuracy — this is a knowledge skill, so verify outputs for correctness if you will rely on them; (3) runtime behavior — autonomous invocation is allowed by platform default (not a red flag here), so review activation triggers to ensure it won't activate too often for your use case. If you want stronger assurance, ask the publisher for a source repository or inspect the full SKILL.md/README contents yourself.