iblai-api-external-service-proxy

SUSPICIOUS. The skill is internally coherent as an ibl.ai proxy integration, and there is no installer, hidden execution, or obvious malware. But it intentionally sends platform-admin tokens, request bodies, headers, and optional files through ibl.ai as a man-in-the-middle gateway for third-party services, which is higher-risk than direct official API use and disproportionate for some sensitive or billable workloads.