plugin-update

SUSPICIOUS: The skill’s behavior is largely consistent with its stated purpose, but it performs direct plugin installation/update from a third-party personal GitHub marketplace and references local scripts not fully visible here. No clear credential theft, covert exfiltration, or malicious pre-execution behavior is present; the main concern is medium supply-chain trust in the external plugin source.

No explicit malware is demonstrated in this fragment because it contains only commands, not plugin code. However, it orchestrates a high-risk supply-chain action: adding an external GitHub plugin source and installing multiple third-party plugins without any visible integrity/provenance controls, then reloading to activate them. Treat this as a supply-chain execution risk and verify the specific plugin versions/commits and their integrity before installation.