investment-analysis

SUSPICIOUS: the skill’s core purpose is coherent, but it has medium security risk because it combines untrusted web/social ingestion, multi-agent execution, local file writes, background servers, and an unreviewed npm install path. It is not confirmed malicious: no credential harvesting, exfiltration endpoint, stealth directive, or trade execution is present.

No direct malicious payload is visible in this installer wrapper. The dominant risk is supply-chain execution: it clones and auto-updates an unpinned GitHub repository and symlinks its skill entry into the host runtime location, and—when npm is present—runs `npm install` in the dashboard directory (which can execute arbitrary lifecycle/dependency install scripts). Lack of integrity pinning/verification and reduced npm audit visibility further increase the likelihood that a compromised upstream could result in local compromise through install-time code execution.