bioresearcher-onboard

SUSPICIOUS. The stated purpose is coherent, but install trust is not: the skill relies on unseen bootstrap scripts, third-party mirror fallback, and an npm-based biomcp installation path that does not match BioMCP's official documented distribution. No confirmed credential theft or overt exfiltration is shown, but the supply-chain footprint is high enough to treat this as a risky onboarding skill.

The code is a recognizable runtime bootstrapper rather than clear malware. It downloads and executes a Node.js binary and configures a package registry for the next stage, which is inherently supply-chain sensitive. The checksum check is weakened by failing open when hashing tools are unavailable, and the existing vendored runtime is accepted without verification. The macOS quarantine removal is also security-sensitive. No direct evidence of data theft, persistence, destructive behavior, or remote access is present in this file.