report-sdk-issue

SUSPICIOUS: The skill’s purpose is coherent, but it enables automatic external reporting via an unverified local script and allows the destination to be overridden to any HTTPS endpoint. Scope is moderate and consent exists, yet background retries plus reduced user visibility make the data flow higher risk than a normal documentation-only skill.