ssh-dev-suite/long-task

SUSPICIOUS. The skill’s remote-task and checkpoint capabilities broadly match its stated purpose, so there is no strong evidence of deliberate credential theft or hidden exfiltration. However, its core functionality relies on unverifiable local scripts that perform remote execution over SSH, with undocumented profile/credential handling and no verifiable release provenance, making the install/execution trust disproportionately weak.

代码表现为正常的远程 checkpoint 管理脚本，未发现明显恶意目的、凭据窃取、数据外传或持久化行为。但它将用户可控内容嵌入未引用的远程 heredoc 和文件路径，存在实际的远程命令注入与路径遍历风险，特别是在攻击者能够控制 write 参数或 JOB_ID 的场景。