api-documentation

SUSPICIOUS: the wrapper’s stated purpose is coherent, and it contains no direct malicious behavior, credential handling, or exfiltration. However, it is a transitive-trust workflow that steers the agent toward multiple third-party skills with weak and inconsistent install provenance, so the main risk is supply-chain exposure rather than confirmed malware.