bioresearcher-python-setup-uv

SUSPICIOUS. The core behavior matches the stated purpose and the primary uv installer is official Astral infrastructure, so this is not confirmed malware. However, the skill performs remote install-and-execute steps, uses unpinned package installs, auto-switches to third-party mirrors, and most importantly offers a ghfast.top proxy fallback for binary downloads that is not verifiably same-org; that makes the install path higher-risk than a normal framework setup guide.