admapix

SUSPICIOUS: the skill's core ad-intelligence behavior matches its stated purpose, but it broadens trust boundaries by forwarding the user's API key and query data to a secondary deepresearch.admapix.com service using a hardcoded bearer token. Mixed publisher/distribution provenance and credential forwarding make the footprint riskier than a normal direct API integration, though there is not enough evidence to call it confirmed malware.