python-executor

SUSPICIOUS. The skill’s core capability—remote Python execution via inference.sh—is aligned with its purpose, and the installer appears to belong to the same org/ecosystem rather than an unrelated third party. However, it expands the agent’s reach through arbitrary code execution, web scraping, remote file return, and transitive skill installation, with install instructions partly routed through mutable raw GitHub content and curl|sh. This looks like a legitimate but high-impact hosted executor skill, not confirmed malware.