shader-dev

SUSPICIOUS. The stated shader purpose is benign, but this stub mainly bootstraps remote installation through an unpinned third-party CLI and installs another skill transitively. No credential harvesting or exfiltration is evident, so this is not malware, but the install-trust and transitive-permission risks are disproportionate to a simple shader helper stub.