setup-claude-devcontainer

SUSPICIOUS. The core Claude Code installation is broadly aligned with purpose and uses Anthropic's official installer, but the skill also sets up recurring transitive installation of third-party skills from user-selected sources, including wildcard suite sync, which materially expands trust and execution scope beyond simple devcontainer setup. High security risk comes from ongoing upstream code/instruction ingestion and mutable remote installers, not from confirmed credential theft or overt malware.