ai-second-brain

SUSPICIOUS: The skill's behavior mostly matches its stated 'second brain' purpose, but it expands into high-privilege integrations, autonomous iMessage replies, and transitive skill/plugin installation. I found no clear credential theft or attacker-controlled exfiltration path, so this is not confirmed malware, but it carries medium-high operational and privacy risk.