persona-dream

SUSPICIOUS. The core dream-packet purpose is plausible, but the actual skill footprint extends into memory persistence, external search, image/video pipelines, and especially autonomous voice-clone submission using provider credentials and publicly hosted WAVs. Data flows largely target official/local services rather than obvious attacker endpoints, so this is not confirmed malware, but the scope and autonomous external actions make it a high-risk skill.