flowhunt

SUSPICIOUS. The stated purpose and broad data-collection capabilities are mostly aligned, and ActivityWatch has a credible official provenance, but the skill handles highly sensitive workplace data across multiple services while the trust-critical connector instructions and endpoint details are missing. Because credential routing and actual install/auth flows cannot be verified from the supplied files, the skill should be treated as medium risk rather than benign.