whatsapp-triage

SUSPICIOUS. The stated purpose and local-only workflow are coherent, and the skill avoids unnecessary credentials or explicit outbound data flows. However, it relies on unverified local helper scripts to parse highly sensitive WhatsApp exports, and no official install/provenance evidence is provided for those executables; that makes the trust model disproportionate to the privacy sensitivity even without confirmed malicious behavior.