da-auth

SUSPICIOUS. The skill’s purpose, token scope, and official Adobe endpoints are coherent with DA authentication, so there is no strong sign of malware or unrelated capability. The main concern is install trust: it executes a GitHub-sourced helper CLI and then relies on that tool to handle OAuth tokens, with limited release verification. Manual token paste also increases credential-handling risk, but data flow stays within Adobe services and local cache paths.