wind-alice-wealth-advisor

This is an automatic skill updater, not clear malware. It performs remote update/install operations and writes local state. The main concrete concern is Windows shell injection from source values read from a local lock file; updates also trust remote package sources. Use trusted lock-file contents and avoid running the updater with untrusted configuration.

The code has a significant credential-disclosure risk: response-controlled download URLs receive the configured API key, and the API endpoint itself is environment-configurable. Restrict download hosts and avoid sending the API credential to file URLs; validate the API endpoint before use.