competitor-monitor

SUSPICIOUS: The skill’s purpose and data collection scope are largely coherent for competitor monitoring, and its external data sources are official public platforms. The main risk is install/execution trust: critical local commands are not provenance-verified, and alert credential handling is unspecified. This is not confirmed malware, but it carries medium-high security risk due to unverifiable execution components and unclear notification plumbing.