llmfit-hardware-model-matcher

Mostly consistent with a hardware-to-model recommendation skill. The main concern is install trust: a curl|sh installer from a custom domain with branding/ownership mismatch signals medium supply-chain risk, but there is no clear credential harvesting, exfiltration, or purpose-incompatible behavior. Overall classification: SUSPICIOUS due to installer provenance ambiguity, not malicious.