hive-setup

SUSPICIOUS. The core behavior mostly matches a Hive onboarding skill and uses largely official/same-org sources, so this is not confirmed malware. However, it combines tool installation, transitive skill updates, SSH key-based repo cloning, and execution of task-provided `prepare.sh`/`requirements.txt`, which expands trust to externally fetched task content during setup; combined with the Python version mismatch, this makes the footprint higher risk than a minimal installer.