agent-sandbox

SUSPICIOUS. The skill's capabilities match its stated purpose, and the installer appears same-org and officially documented, which argues against outright malware. However, it relies on unpinned `curl | sh`, forwards an API key to the installed CLI, and is explicitly built to give an autonomous agent root-capable remote execution plus the ability to send setup scripts and secrets into provider-managed VMs. That combination is coherent but materially risky.