iblai-profile

SUSPICIOUS: mostly coherent developer tooling for ibl.ai profile features, with same-org installs and official-looking data flows, but it expands trust by invoking external CLI tooling and other skills, handles raw tokens from localStorage, and asks the agent to perform side-effectful local actions automatically. This is not clearly malicious, but its execution footprint is broader than a simple UI skill.