full-stack-builder

This fragment contains no direct evidence of malware (no explicit credential theft, network exfiltration, or command execution), but it introduces a major supply-chain/integrity hazard by modifying sys.path to import from a hardcoded /tmp directory and then delegating un-sandboxed workflow execution to imported modules/skills. Treat this as a high-importance review item: ensure '/tmp/manus-skills-v2' is trusted, immutable, and not attacker-writable, and audit SkillRegistry/SkillComposer and all referenced skills for dangerous side effects.

SUSPICIOUS: the stated purpose matches orchestration of app-building skills, but trust is weakened by execution of an unverified local /tmp script and by broad transitive dependence on other skills with unspecified provenance and permissions. No direct exfiltration, credential harvesting, or malicious installer behavior is shown here.