multi-pattern

SUSPICIOUS: the skill's purpose is plausible, and the named endpoints appear official, but it expands user queries across three external services without declaring compliance, privacy limits, or credential scope. This is more a governance and data-sharing risk than confirmed malware.