cold-start

SUSPICIOUS. The skill’s overall purpose is coherent for data bootstrapping, and many actions are proportionate, but it processes very sensitive personal data and introduces a third-party credential/data gateway plus transitive skill delegation. This is not confirmed malware, but the ClawVisor routing and broad scope make it higher-risk than a purely local or official-API-only import workflow.