book-installer

SUSPICIOUS: the skill’s core purpose is coherent for textbook project setup, and most file edits plus official-service integrations fit that purpose. However, it expands trust to unverifiable bk-* helper CLIs and to additional downstream skills, giving it a larger and less-auditable execution footprint than a simple installer guide should have.

No clear malware or deliberate supply-chain backdoor is present. The implementation has security risks because a URL-controlled source is fetched and its HTML is inserted into the live DOM without sanitization. The error display also uses innerHTML with URL-derived data, creating a potential reflected XSS vulnerability. Restrict fetch destinations and sanitize fetched HTML, and use textContent or safe DOM construction for error messages.