companion-clis

SUSPICIOUS. The core purpose and credential scope are coherent for Runpod workflows, and most data flows go to official services. The main risk is install/execution trust: official but unsafe curl|bash installers, plus an optional third-party community storage tool from a personal repo that is given Runpod API and S3 credentials, which is disproportionate enough to raise overall risk.