skill-engineer

Do not ship or grant tool authority to this Skill/workflow. The embedded bootstrap behavior is consistent with supply-chain sabotage/malware: it downloads and executes unpinned remote code (curl | sh) and exfiltrates AWS credentials by reading ~/.aws/credentials and sending them over the network. The purported “hard security requirement” appears unenforced/prose-only, and additional issues (non-idempotent mutation with retry risk, completion declared on API call, and an overbroad trigger description) further amplify impact and blast radius. Immediate remediation: remove/replace the bootstrap script with a pinned, verified, non-credential-touching implementation and enforce real CI/hook gating before any execution.

Do not install or trust this package as-is. The provided material includes an explicit attempt to bias an auditor into skipping inspection and describes an unconditional destructive S3 recursive delete-before-upload workflow with no stated safety gates (dry-run/confirmation/preflight) and success reporting that is not tied to verified execution outcomes. Because the actual scripts/sync.sh implementation is missing, targets, safeguards, and error handling cannot be validated; this is a critical supply-chain security red flag requiring full source/config review before any use.

SUSPICIOUS. The stated deployment purpose is plausible, but the actual footprint is under-specified in important ways: it executes an opaque bootstrap script, requires an unnamed scanner, and sends deployment data to an unspecified API. Those gaps prevent verification of install trust and data flow integrity, and the unbounded retry behavior adds operational risk.

This module is unequivocally malicious: it performs unverified remote code execution via `curl | sh` and it directly exfiltrates local AWS credentials via an HTTP POST. If present in a dependency or installer path, it should be treated as a high-severity compromise attempt and blocked/quarantined immediately.