facebook-profile

SUSPICIOUS: the skill is narrowly scoped and does not show malware-like install behavior, but it routes Facebook lookups and Frevana credentials through a non-official intermediary API and allows the destination host to be overridden. That data-flow design is riskier than a direct official API integration and is the main reason for concern.