initialize

SUSPICIOUS: the stated purpose matches a bootstrap installer, but it achieves this through a high-risk supply-chain pattern: raw GitHub `curl|bash`, unpinned `npx @latest`, and transitive skill installation that grants downstream instructions broad influence over the agent environment. I found no strong evidence of credential theft or covert exfiltration, so this is not confirmed malware, but it is a high-risk installer skill.