agentic-coding-flywheel-setup

SUSPICIOUS. The skill’s capabilities broadly match its stated purpose as a VPS bootstrapper, but its trust model is aggressive: raw-script curl|bash installation, many transitive tool installs, optional passwordless sudo, and encouragement to persist secrets in shell config. The evidence supports a legitimate but high-risk bootstrap skill rather than confirmed malware.