install-stack-flagos

SUSPICIOUS. The overall purpose and capabilities are coherent for a GPU stack installer, and most network activity targets expected package/repo sources. Risk comes from substantial supply-chain exposure: git-clone-then-build/install flows, mirror-based source selection, and incomplete provenance for some components—especially the FlagGems org mismatch and unclear FlagTree wheel origin. No clear credential harvesting, exfiltration, stealth, or malicious mismatch is evident.