messages

SUSPICIOUS. The skill's capabilities fit a messaging tool, but it empowers autonomous outbound communication and depends on unverifiable local components (cli-text, scripts/messages.sh, Tariboy daemon) whose behavior cannot be confirmed from the provided text. No direct malware indicators, credential harvesting, or remote installer patterns are present.