interview-prep

SUSPICIOUS. The skill’s purpose broadly matches its behavior—live interview-data collection and summarization—but it relies on a third-party remote agent platform, live scraping of untrusted sources, and a stealth browser profile. The biggest trust issue is the installer inconsistency: the skill says `npm install -g tinyfish`, while the cited official docs use `npm install -g @tiny-fish/cli`. That mismatch, combined with credentialed remote execution and broad external-content ingestion, makes the skill medium-to-high security risk rather than benign.