competitive-intel

SUSPICIOUS. The skill's stated purpose is coherent with its capabilities, and there is no clear credential theft or malicious payload behavior. However, it executes unpinned PyPI-delivered tooling at runtime and uses a third-party proxy fetch fallback, creating moderate supply-chain and data-flow risk that is higher than a purely tool-native research skill.