skill-installer

This fragment does not show explicit malicious code (no eval/exec, obfuscation, or exfiltration), but it exposes a high-impact capability: a remote client can request installation of a marketplace “skill” via saveInstalledSkill(), making supply-chain and downstream code-loading behavior the key risk. Risk should be reviewed by inspecting getMarketplaceSkills() authenticity/verification, authorization around tool calls, and the exact side effects and safety constraints implemented inside saveInstalledSkill() (not visible here).