cube

SUSPICIOUS. The skill’s core behavior is mostly consistent with its stated purpose of querying UNISIS SQLite cubes, and there is no obvious malicious install or exfiltration pattern. However, the `cube` CLI itself is not publicly verifiable from the provided evidence, and the feedback feature sends authenticated identity-bearing data to an unspecified endpoint, creating moderate trust and data-flow risk.