agentonboard

SUSPICIOUS. The skill's behavior mostly matches its stated purpose, but it introduces a sensitive trust boundary around an external `aon` CLI and credential/token management without showing verifiable install provenance or full data-flow details. No direct malware indicators or overt exfiltration are present in the supplied fragment, but the combination of third-party CLI dependency and credential forwarding keeps risk at medium.