hummingbot-deploy

SUSPICIOUS. The skill’s trading/deployment actions broadly match its stated purpose, but it relies on multiple unpinned download-and-execute paths, forwards trading API credentials into installed tooling, and asks the agent to install another skill transitively. Same-org Hummingbot provenance reduces evidence of outright malware, yet the install and trust footprint is broader and riskier than a low-risk deployment guide.

The script appears to be a legitimate installer/configurator and contains no clear malicious payload in the supplied code. It has moderate supply-chain and credential-handling risk because it pulls an unpinned Docker image, delegates execution to that image, and places API credentials into a command string that may be persisted or exposed. Pin the image by digest, handle arguments as an array rather than a string, and use a safer secret-passing mechanism before production use.