using-humane

SUSPICIOUS. The skill’s behavior is mostly coherent with its routing purpose and shows no credential harvesting or odd data flows, but it asks the agent/user to install an entire third-party skill pack from an unpinned personal GitHub repo via pi. That makes this primarily a medium supply-chain and transitive-trust risk, not confirmed malware.