automate-whatsapp

SUSPICIOUS. Most install and API guidance is coherent and uses official Kapso tooling, so this is not confirmed malware. Risk rises because the skill enables high-impact agent capabilities: remote sandbox execution with outbound networking, GitHub PAT forwarding, arbitrary webhook/MCP endpoints, and public function exposure. These belong to advanced workflow automation, but they meaningfully expand data-exposure and execution scope beyond a simple WhatsApp builder.