langchain-retrieval-agent

SUSPICIOUS: the skill's purpose is coherent, and the rm -rf findings are benign setup cleanup, but trust is reduced by the repo-owner redirect, package-manager mismatch, and request for a privileged Supabase key. No evidence of overt malware or credential exfiltration beyond normal app runtime, but the install provenance is inconsistent enough to avoid a benign classification.