ic-rooms

SUSPICIOUS. The core skill is mostly coherent and uses official Immersive Commons APIs, but the advanced/live path materially expands trust by directing users to a personal GitHub repo that receives IC credentials and mints additional room credentials. That third-party credential-forwarding step is disproportionate to the basic room-management purpose and pushes the overall risk to medium-high even without clear evidence of malware.