synthesis-onboarding

SUSPICIOUS: the skill's purpose and capabilities mostly align, and the main bootstrap appears to come from the same GitHub org documented by the publisher. However, it relies on mutable curl|sh installation, broad local git/filesystem changes, and transitive installation/delegation to additional skills/repos from manifests, which raises medium-to-high security risk even without clear evidence of malicious exfiltration.

No direct evidence of hidden malicious payloads or obfuscation in this module. However, it has high supply-chain risk: it clones remote git repositories specified by a manifest and then executes installation scripts from those repositories (`sh <cache>/<installer> install`), with manifest-driven path/script selection and environment-variable influence. It can also set git hook paths based on manifest/repo content. If an attacker can alter the manifest or the referenced repositories, this module can become a direct code execution vector. Validate/lock down manifest sources and repository integrity (pin commits, verify signatures/hashes) before use.

No explicit malware behavior is evident in the provided YAML template or the wrapper script (no exfiltration, credential harvesting, or backdoor/persistence code shown). However, the onboarding mechanism intentionally executes Python code fetched from a remote git repository and can further run repository-provided installer scripts specified by the manifest. In this fragment, there is no visible commit/tag pinning, signature, or checksum verification, and $SRC can be environment-overridden—together creating a meaningful supply-chain execution risk that should be mitigated with integrity controls and strict manifest/repo provenance validation.