inbox

SUSPICIOUS: the skill is purpose-aligned and routes data to same-brand official endpoints, so it does not look malicious. However, it enables wallet spending for message sends and ingests untrusted message content, making it a high-impact skill that needs strict user approval and caution around acting on inbox contents.