claude-code-safety-net

SUSPICIOUS: the stated purpose and capabilities are mostly aligned, and no clear credential exfiltration is described, but the skill’s core action is to install and trust third-party plugins/marketplaces across multiple agent tools. That transitive install footprint and external bunx/plugin execution make this a medium-risk supply-chain trust issue rather than confirmed malware.