termux-api

SUSPICIOUS. The install path is coherent and official to the Termux ecosystem, with no rogue download-execute chain or third-party credential routing. However, the skill grants an agent unusually broad remote control over an Android device and access to sensitive personal data/actions (SMS, calls, camera, mic, contacts, location, clipboard, file transfer). This footprint matches the skill’s purpose, so it is not malicious, but the capability scope makes it medium-to-high risk in practice.