enterprise-user-management-system-ai-analytics

SUSPICIOUS. The skill’s functionality mostly matches its stated enterprise analytics purpose, and the credentials/data flows are broadly proportionate. However, the installation trust is weak because ara.so publishes the skill while execution starts from an unrelated personal GitHub repository with no visible release provenance, making this a supply-chain risk rather than confirmed malware.