iblai-api-studio-auth

SUSPICIOUS: the skill’s purpose and first-party data flows are mostly coherent for Open edX Studio session auth, and the scanner’s command-injection findings are documentation false positives. However, the bundled cookie-capture script is not provided for review, yet it handles reusable session cookies and may perform dynamic dependency installation, so trust cannot be fully established.