connecting-im-bot

SUSPICIOUS: The stated purpose is plausible and the requested IM credentials are generally proportionate, but the skill hides the actual runnable logic in unprovided reference files. Because those files likely contain the network endpoints and execution steps for credentialed WebSocket connections, the trust model and data flows cannot be verified; this uncertainty, combined with persistent credential storage and background reconnect behavior, makes the skill medium risk until the reference files are reviewed.