agora-reporting

SUSPICIOUS. The reporting purpose is coherent, but the skill’s trust model is weak: it relies on an external CLI with unpinned install provenance, executes CLI-generated shell via `eval`, forwards a bearer token, and treats remote inbox content as actionable user input. The command-set mismatch between the public Agora docs and this skill further reduces confidence that the binary/interface is the same officially documented tool.