skill-installer

Classificação SUSPICIOUS. A finalidade declarada combina com instalação/registro de skills, mas o escopo inclui descoberta ampla, auto-instalação e manutenção em massa de outras skills, criando risco transitivo e persistente desproporcional ao rótulo 'safe'.

In this fragment, there is no direct evidence of classic malware behavior (no network exfiltration, no credential theft, no reverse shell, no obvious obfuscated payload). The primary security concern is supply-chain/compromise impact: the installer broadly copies untrusted skill directory contents into persistent directories and then executes/loads additional local Python components (imports after sys.path modification and a subprocess call to scan_registry.py) without any integrity/pinning/verification shown here. As a result, if an attacker can tamper with the skill package contents or the local helper scripts/modules, this installer can become a vehicle for sabotage or later code execution by downstream systems. Overall risk is moderate and should be reviewed alongside validate/detect/package and scan_registry implementations.