iblai-api-notification

SUSPICIOUS. The skill’s purpose matches notification read/write actions and there is no installer or obvious exfiltration proxy, but the documented hostname/path and auth header differ from the public ibl.ai notification docs. Because it can autonomously trigger outward-facing notifications and the endpoint/auth details are not fully verified, the overall risk is medium rather than benign.