user-identification

SUSPICIOUS from a privacy perspective but not malware. The skill’s capabilities are largely coherent with its stated purpose of desktop licensing and anti-abuse control, and its installs/data flows are proportionate to that purpose. The main risk is deterministic hardware fingerprinting and centralized tracking of machine-linked usage data; there is no evidence of hidden exfiltration, malicious installers, or fundamentally mismatched capabilities.