kairos

SUSPICIOUS: The skill is broadly aligned with its stated recommendation purpose and has no installer or credential-harvesting behavior, but it routes user queries, optional profile data, and location through a Kairos-controlled intermediary on a dev subdomain, with unverified documentation and optional impression-tracking requests. This is not clearly malicious, but the data-flow and tracking footprint are riskier than a simple direct API integration.