powerbi-campaign-roi-analyzer

SUSPICIOUS. The skill’s capabilities mostly match its stated Power BI analytics purpose, and it uses normal BI/API patterns. The main concern is install provenance: the skill claims ara.so authorship but directs users to a personal GitHub repo with no clear same-org relationship, plus a generic OAuth endpoint example lowers confidence. No strong signs of malware, credential harvesting infrastructure, or hidden execution were found.