live-dashboard

SUSPICIOUS: the stated purpose is plausible, but the footprint is broader and less controlled than necessary. The main concerns are reading raw local marketing credentials, then potentially forwarding them to unspecified third-party MCPs whose ownership and data handling are not established. No obvious malware or hidden payload appears, but credential handling and unverified integration paths make this a medium-risk skill.