iblai-test

SUSPICIOUS: the testing purpose is coherent, and network/data flow stays mostly within the local app plus the stated ibl.ai login domain, but the skill unnecessarily asks for the user's real password and stores it in plaintext for automation. That credential-handling choice makes the skill higher risk than a normal testing guide even though it does not show clear malware or third-party exfiltration behavior.