install-panda

SUSPICIOUS. The skill is broadly aligned with its stated purpose, but the remote pipe-to-shell installer and mismatch with the project’s documented install path create meaningful install-trust risk. The setup step also mentions auth without documenting credential handling, so the skill is not clearly malicious but is insufficiently trustworthy to rate benign.