churn-analysis-helper

SUSPICIOUS. The skill does not show malware indicators, installs, credential harvesting, or outbound data routing, but its documentation is generic while permissions are broad—especially unrestricted Bash(cmd:*). The main issue is disproportionate execution scope for an underspecified analytics helper.