1-SEC: All-in-One Cybersecurity for AI Agent Hosts

This package appears to be a legitimate installer for an on-host security agent, but review these points before installing: - Verify provenance: compare the repository and release referenced in SKILL.md to the official project (the skill points to github.com/1sec-security/1sec). Confirm the GitHub owner is who you expect and inspect the release artifacts and checksums yourself. The registry's reported version (0.4.15) differs from the files (0.4.11) — resolve that mismatch. - Prefer manual install & verification: follow the documented manual download + sha256sum verification rather than running scripts blindly. Check checksums.txt on GitHub and verify locally. - Test in isolation: install first in a non-production/staging environment. The platform can (if you enable aggressive presets) kill processes and quarantine files automatically — test with dry-run and the safe preset. - Be cautious with opt-ins: enabling cloud.enabled, GEMINI_API_KEY, or webhook URLs will transmit alert metadata and host identifiers off-host. Only enable these to trusted endpoints and rotate any API keys you provide. - Review presets before applying: the vps-agent preset disables approval gates and may use skip_approval for critical actions. The installer defaults to dry-run safe mode, but applying aggressive presets has high impact. - Confirm auto-update and uninstall procedures: understand how selfupdate works and how to fully remove the agent (the docs provide steps). Consider disabling auto-update if you require stricter control. If you want higher confidence, ask the publisher to provide a homepage, reproducible release artifacts, GPG-signed releases, or an SBOM — and confirm the registry metadata is updated to match the shipped files.