find-skills

SUSPICIOUS. The skill's purpose and capabilities mostly align, and the stated Tencent/SkillHub data flow is plausible, but it is a transitive installer and the decisive trust controls live in an unseen local script. Medium-to-high risk comes from installing other skills and an unspecified bootstrap CLI path, not from confirmed malware or overt exfiltration.

The code is a SkillHub/OpenClaw skill and CLI installer. It does not show clear malicious intent or evidence of credential theft, exfiltration, backdoors, or destructive behavior. It does create a significant supply-chain trust boundary by downloading and installing remote Python, shell, and plugin code, especially through an unpinned latest bootstrap archive and optional arbitrary kit URL. Archive extraction should reject symlinks/hardlinks and bootstrap artifacts should use signatures or pinned checksums. The supplied fragment also appears syntactically incomplete at the final `main(` call.