aurora

SUSPICIOUS: the skill's stated purpose as a smart-home router matches its behavior, and there is no direct credential harvesting or exfiltration. Main concerns are transitive trust into many downstream skills, broader-than-necessary tool permissions, and personal-repo distribution rather than an official vendor channel.