aap-eda

SUSPICIOUS: the skill’s stated EDA management purpose matches its capabilities and credential scope, and data appears to flow to the intended EDA API rather than an unrelated gateway. However, trust is weakened because installation depends on a personal GitHub repo and the associated code both receives `EDA_TOKEN` and reportedly disables TLS verification, creating meaningful supply-chain and transport-security risk disproportionate to a production automation admin tool.