stelow-workflow-orchestrator

The fragment is workflow documentation, not malware by itself. The direct `curl -fsSL ... | bash` installer pattern is a significant supply-chain execution risk, and the stated checksum verification is absent from the shown command. The silent-approval behavior may also undermine review integrity if used without actual review. Further assessment requires the installer, the CLI implementation, and receipt-writing code.