skill-installer

SUSPICIOUS: the stated purpose matches installing skills, but the skill is inherently higher risk because it installs other skills into trusted agent directories. The main concerns are transitive trust and unclear catalog provenance, plus mismatches with official Anthropic/OpenCode install documentation. No direct credential theft or exfiltration is evident in the provided content.

The code is primarily a skill installation utility and contains no clear direct malware such as reverse shells, credential harvesting, cryptomining, or covert exfiltration. However, it has significant path validation weaknesses. A malicious catalog response can potentially write files outside the temporary destination, and crafted local skill names or uninstall arguments can escape the intended harness directory and overwrite or delete arbitrary paths. These issues should be fixed by resolving paths and enforcing containment, rejecting absolute paths and traversal components, and validating skill names before installation or removal. The code fragment also appears incomplete and may not run as provided.