analytics-tracking

SUSPICIOUS: the available evidence shows a same-source but unpinned transitive skill installation flow, which is a meaningful trust risk for an AI agent. There is no direct evidence of malware or credential theft, but without the actual SKILL.md the capability scope and data handling cannot be confirmed.