speak-migration-deep-dive

SUSPICIOUS. The skill’s stated purpose is plausible and its only explicit data flow sends credentials to a Speak-owned API domain, which is consistent with the claimed integration. However, the implementation is thin relative to the migration/import claims, it references unverified Speak-specific SDK/API artifacts, grants broader shell permissions than necessary, and depends on another unreviewed skill. This looks more like a weakly substantiated integration guide than confirmed malware, but the provenance and scope inconsistencies raise medium risk.