bmod-tea

The fragment contains no clear malware or unauthorized data theft. It does contain a significant command-injection vulnerability in run-by-component.ts because untrusted component names are interpolated into execSync shell text. The shell examples also have unsafe quoting practices, and mutable GitHub Action tags create a supply-chain integrity concern. Use execFileSync with an argument array, validate component names against a strict allowlist, quote shell variables, and pin actions to immutable SHAs.

SUSPICIOUS: the skill is mostly a redirector whose practical effect is to induce installation of another skill. The target repo appears official and the command matches documented usage, so this is not overtly malicious, but transitive skill installation and unpinned `npx` execution make the trust model broader than a simple metadata record.