ship-software

SUSPICIOUS: the core SOP is plausible, but its required prerequisite is disproportionate and expands into a large third-party toolkit with many transitive installs and automated agent actions. The main risk is supply-chain and inherited trust, not confirmed malware or direct credential theft in this file.