club-3090-llm-serving

SUSPICIOUS: the stated purpose is coherent for an LLM-serving skill, but install trust is weakened because the skill is attributed to ara.so while the actual executable content comes from a different GitHub publisher and requires running opaque shell scripts that download additional assets and patches. No clear credential harvesting or malicious exfiltration is visible, so this is not confirmed malware, but it carries meaningful supply-chain risk.