alibabacloud-agent-toolkit-install

SUSPICIOUS. The skill’s purpose mostly matches its actions and official Alibaba Cloud API usage, but its install footprint is heavier than necessary: multiple remote script installers and a mandatory `npx openplugin` path with limited provenance create meaningful supply-chain risk. No clear credential theft or malicious exfiltration is evident from the instructions alone.