who-is-this

The skill’s stated purpose and actions mostly align, but its mandatory reliance on an unspecified DeepAPI intermediary and another unreviewed skill makes the data flow and trust model incomplete. This is suspicious rather than malicious: the main risk is third-party routing of profile data and transitive dependency on unverified instructions.