install-script-generator

SUSPICIOUS. The stated purpose matches the capability—this is an installer-generator skill—but its footprint is high-risk because it explicitly promotes mutable remote-script execution as the primary distribution model. No credential harvesting or hidden exfiltration is evident, so this is not confirmed malware; the main issue is supply-chain and execution trust.