analytics-explore

The skill's stated purpose and API usage are coherent for analytics exploration, and its network targets appear aligned with GrowthBook. The main issue is trust: all authenticated activity is funneled through a bundled local helper (`gb-call`) that is not independently verifiable here, and it receives `GB_API_KEY`. That makes this high risk from a supply-chain/credential-forwarding perspective, but not confirmed malware.