bibi-feed

SUSPICIOUS. The skill’s capabilities fit its stated feed-management purpose and use official BibiGPT infrastructure, so there is no strong sign of malware. However, trust is materially weakened by the vendor CLI install chain and especially by remote manifest-controlled behavior that currently routes API operations through a different domain (`aitodo.co`), making data-flow integrity less clear than the docs imply.