engineering-advanced-skills

SUSPICIOUS. The stated purpose is coherent, but the installation method depends on an unrelated third-party CLI and creates a transitive trust chain for remote skill content without version pinning. No direct credential theft or malicious data flow is visible in this snippet, so this is a supply-chain and trust-boundary concern rather than confirmed malware.