bluebubbles

The skill’s capabilities are broadly aligned with its stated purpose: it is an iMessage/BlueBubbles action wrapper and does not include hidden installs, shell execution, or obvious exfiltration logic. Risk comes from scope and actionability: it can send and modify real messages on the user’s behalf, and it forwards message content plus gateway credentials to a configurable BlueBubbles server. That makes it high risk operationally, but not malicious based on the provided evidence.