ai-automation-workflows

SUSPICIOUS: overall coherent with AI workflow automation, and the installer appears to be official same-org infrastructure rather than an unrelated third party. Risk comes from pipe-to-shell installation, broad Bash/CLI execution, optional webhook forwarding of command output, and transitive installation of other skills; these are proportionate enough to avoid a malicious classification but raise medium security concern.

Overall security posture is high-risk from an operational/supply-chain-use perspective. The material contains a critical pipe-to-shell remote installer pattern, guidance that can enable cron-based recurring execution, and templates that can transmit unredacted local file contents and captured command/error output to external services/webhooks. While this appears to be documentation/templates rather than covert embedded malware, following or copy/pasting these commands can result in arbitrary code execution (if the installer endpoint is compromised) and sensitive data disclosure (if local files or stderr contain secrets).