setup-linux-host-collection

SUSPICIOUS. The skill's capabilities largely fit its stated purpose and data flows go to official Observe infrastructure, so it is not fundamentally incompatible or overtly malicious. However, install trust is weakened by disabled package signature verification (`trusted=yes`, `gpgcheck=0`) and by dynamic remote skill reloading through `observe skill view`, which makes the overall footprint higher risk than a normal documentation-only setup skill.