soia-dev-ai-cli-upgrade

SUSPICIOUS. The skill’s purpose broadly matches CLI audit/upgrade automation, but its footprint is enlarged by transitive skill installation, wildcard agent permissions in the install example, and multiple remote installer paths across many vendors. No clear credential theft or covert exfiltration is described, so this is not confirmed malware; the main concerns are supply-chain trust and overbroad installation scope.

No explicit malicious payload (exfiltration/stealth/backdoor) is visible in this fragment. However, it contains several high-risk supply-chain behaviors: downloading and executing a remote installer script without checksum/signature verification, executing arbitrary shell from CURSOR_UPGRADE_CMD via bash -lc, and using eval to apply exports from a local config file. These patterns could be leveraged for sabotage if an attacker can tamper with the config/environment or influence the downloaded installer contents. Overall, treat this script as security-sensitive and ensure inputs are trusted and integrity checks are added.