travel-planner

该技能总体目的与旅行规划基本一致，但信任边界较宽：它依赖外部 CLI 进行数据获取，处理大量不受信任内容，并具备写文件与自动公开部署能力。未见明确恶意窃密或隐藏行为，但发布动作与第三方数据通道使其更适合判定为 SUSPICIOUS 而非 BENIGN。

This is a high-risk supply-chain installer/loader: it downloads a mutable GitHub branch archive at runtime without integrity/authenticity verification, extracts it, and immediately executes the extracted install.sh with caller-controlled arguments. While this snippet alone cannot prove the upstream install.sh is malicious, the execution model is consistent with scenarios where upstream compromise leads to arbitrary code execution on the installer’s host. Mitigation should include pinning to an immutable commit/tag and verifying signatures/hashes before extraction/execution.