exe-dev

SUSPICIOUS. The skill's main capabilities fit exe.dev VM administration, but it mixes legitimate infrastructure guidance with a high-risk bootstrap path: an unpinned curl|bash from a personal GitHub repo used as default setup for new VMs. Data flows mostly match the stated purpose, yet the remote script execution, disabled SSH host-key checks on Tailscale hosts, and proxy-mediated integrations raise material security risk without enough provenance evidence to treat as benign.