> Installs /usr/local/bin/keybase without asking permission

I'd guess that any installer would be expected to do this, this particular item doesn't sound "shady".