chatbot-review

SUSPICIOUS: The skill’s purpose is coherent, but it relies on a third-party integration layer (Composio) for both credentials and chatbot transcripts instead of direct official service APIs. The installer is same-org and verifiable, so this is not malware, but the intermediary data flow and curl|bash install create meaningful trust and privacy risk.