agent-tools

No direct malicious payload is present in the supplied documentation. However, the curl-to-shell installation and update commands create a significant supply-chain execution risk because arbitrary remote content is executed without checksum or signature verification. The actual installer and CLI require separate review, particularly for credential storage and network behavior.