connect

SUSPICIOUS: the skill is internally consistent with its stated purpose and uses official package sources, but it grants broad real-world action capability and routes credentials/actions through Composio-managed infrastructure. This is not confirmed malware, but it is a high-impact integration skill with meaningful credential-forwarding and autonomy risk.