scraping-specialist

SUSPICIOUS. The skill’s capabilities largely match its stated reverse-engineering purpose and its dependency provenance is mostly legitimate and same-org official, so it is not malware. However, it equips an AI agent with powerful binary-analysis and code-execution workflow plus a custom bootstrap path with unpinned Git ref support, making it higher-risk than a normal documentation skill.

SUSPICIOUS: the top-level router is mostly coherent for scraping, but inclusion of IDA Pro reverse-engineering sub-skills is materially inconsistent with the stated purpose and broadens capability into security tooling. No direct credential theft or malicious exfiltration is visible in this file, so this is not confirmed malware; risk is driven by scope mismatch and unreviewed downstream scripts/sub-skills.

No explicit malicious behavior (e.g., exfiltration/backdoors/credential theft) is evident in the shown fragment. However, the script performs high-impact supply-chain operations: it fetches remote code from GitHub based on a dynamic 'latest' tag or user-supplied ref, checks out that ref, installs it as an editable Python package, and then runs a Python one-liner for validation. Without commit pinning and without visible integrity/signature verification in this snippet, a compromised or malicious upstream ref could lead to arbitrary code execution during install/validation. Additionally, the validation payload (`test_script`) is truncated, so the exact execution content cannot be fully verified.