lab-setup

SUSPICIOUS: the purpose matches installing lab tools, but the trust model is weak because a personal remote curriculum can supply shell commands that the agent executes verbatim, including transitive installation of other skills/plugins. No clear credential theft or malware behavior is shown, but the remote command supply-chain exposure makes this higher risk than a normal setup guide.