last30days

SUSPICIOUS. The skill’s capabilities largely match its research purpose, and its install path is benign, but it has medium risk because it loads local X credentials and forwards them to an unofficial third-party CLI, while also processing large volumes of untrusted external content that could carry prompt-injection instructions. No evidence of overt malware or unrelated exfiltration was found.