setup-devcontainer

SUSPICIOUS: the core devcontainer setup is coherent, but the automatic skill-sync behavior creates a transitive trust chain by installing external skills, and the optional YOLO alias lowers safety controls. The SSH/GitHub automation is purpose-aligned, yet expands authority. Overall this is not confirmed malware, but it carries meaningful supply-chain and autonomy risk beyond a minimal devcontainer helper.

This snippet does not directly implement exfiltration or a payload, but it persistently modifies `~/.bashrc` to add an alias that runs `claude` with explicitly unsafe flags (`--dangerously-skip-permissions`) and enables `--remote-control`. Treat it as a significant security warning: the risk depends on what `claude --remote-control` can do and whether bypassing permission checks is acceptable in the environment. Review and verify the tool’s behavior, and consider removing or gating the alias.