sorted

SUSPICIOUS: the core Sorted browser automation is purpose-aligned and uses mostly official endpoints, but the skill is over-scoped. It embeds sensitive personal financial data, reads local Telegram credentials, and enables autonomous tax submission and invoice delivery through extra channels, raising medium-high security risk without clear signs of confirmed malware.