friction-report

SUSPICIOUS: the skill’s reporting purpose matches its capabilities, but it automatically transmits conversation-derived summaries to a third-party Vercel service before explicit user consent. The data flow is coherent yet privacy-sensitive, and install/service trust is only moderately verifiable through same-author repo linkage rather than strong release provenance.