train-convo-steering

SUSPICIOUS. The core behavior matches the stated purpose, but the skill routes sensitive conversation data and API credentials to a configurable external gateway instead of requiring the official DeepSeek endpoint. Cross-session storage of per-user behavioral priors is purpose-aligned yet privacy-sensitive. No malicious installer or overt credential theft is shown, but the intermediary API design and persistent profiling make this higher risk than a normal documentation or runtime helper skill.