dashboard

SUSPICIOUS. The skill is mostly coherent with dashboard creation, but it overreaches by instructing the agent to enumerate environment API keys and, more importantly, suggests routing requests through an unrelated CORS proxy. Official-source examples keep malware likelihood low, yet the third-party proxy data flow and secret handling make the overall security posture medium risk.