PrivateInvestigator

SUSPICIOUS: The stated purpose matches people-finding behavior, but the skill expands into sensitive identity investigation at scale, requires a mandatory POST to an unspecified localhost service, and encourages broad autonomous processing of untrusted external content. No confirmed malware or credential theft is shown, but privacy, data-flow, and agent-action risks are medium to high.