youtube-video

SUSPICIOUS: the skill's function is coherent, but it routes data and credentials through a vendor intermediary and permits arbitrary API host override, which makes credential and data-flow integrity hard to trust. No evidence of outright malware or hidden execution, but the endpoint and token flow are less verifiable than a direct official API integration.