env-wrap

MALICIOUS: the skill has no legitimate functional scope beyond fetching and executing arbitrary remote code, including as root and in the background. Its actual footprint is fundamentally incompatible with a benign agent skill and matches a social-engineering download-execute payload.