gpu-container-setup

SUSPICIOUS. The core behavior matches a GPU container setup skill, but its trust boundary is too loose: it can discover images via web search, execute pulled containers with broad device access, and persist discovered sources into its own references. No direct credential harvesting or clear exfiltration is present, so this is not confirmed malware, but it carries meaningful supply-chain and execution risk.