soia-meta-skill-release

No clear signs of overt malware (no exfiltration/credential theft/backdoor). The code is an automation/release utility that executes npx and a local sync script and performs filesystem deletions. The main security concern is that skill/removed names from CLI are used in filesystem deletion paths without sanitizing path separators (possible path traversal leading to unintended deletions). It also carries inherent supply-chain/execution risk due to running npx and executing a script from installed directories.

This module is a local installer/registrar that discovers plugin manifests in user-controlled local directories, copies arbitrary plugin/expert directory contents into the WorkBuddy config directory (deleting any prior version), and then executes WorkBuddy’s bundled register_expert.py using the copied content as input. The code fragment shows no direct exfiltration or embedded malware, but it introduces meaningful supply-chain risk due to missing authenticity/validation of plugin content and unsanitized use of manifest['name'] as a path segment. Review register_expert.py and the plugin execution/loading behavior to determine whether malicious plugin content could be executed or cause persistence.