teams-webhook-sender

SUSPICIOUS: the skill is not overtly malicious and shows no installer, credential-stealing, or confirmed exfiltration logic, but it is materially underspecified for its purpose and grants unrestricted Bash access that is broader than a simple Teams webhook guidance skill should need. Risk comes from overbroad execution scope and unclear outbound data flows, not confirmed malware.