propositions

SUSPICIOUS. The core behavior fits a proposition-writing skill, and there is no credential harvesting or clear exfiltration path in the provided content. Risk comes from the expanded Bash+Agent execution surface, optional research over untrusted content, and reliance on third-party marketplace/cache provenance rather than a tightly verified install path.