plugin-installer

SUSPICIOUS: The skill’s purpose matches its install behavior, and it uses reasonable controls like quarantine, validation, provenance, and rollback. However, it still installs code from arbitrary GitHub sources into a live local plugin directory, with override paths for trust and pinning and no stated upstream signature/checksum verification, so the supply-chain risk is meaningful even though there is no clear credential theft or malicious exfiltration pattern.