setup-openhands

SUSPICIOUS: the skill’s core purpose is legitimate and mostly aligned with its file access and writes, but it creates persistent auto-executing shell scripts and a credential-bearing PR review workflow with minimal user intervention. Official same-org OpenHands docs reduce malware concerns, yet transitive trust and mutable plugin references make this a medium security risk.