x2c-real-dashboard

SUSPICIOUS: the stated purpose is coherent for a personal dashboard skill, and the single required credential is proportionate. However, the real data flow is not transparent because all network behavior is hidden in local shell scripts, and the API destination is undisclosed; given related evidence pointing to a third-party Supabase endpoint, the key may be routed through intermediary infrastructure rather than a clearly official X2C API.