paoding

SUSPICIOUS. The core purpose is mostly coherent, but the skill goes beyond passive analysis by invoking local scripts, consuming browser login cookies, and optionally reading a local key file for API collection. The named third-party tools appear legitimate, which reduces malware confidence, but the unseen paoding scripts and unknown API endpoints make credential/data routing unverifiable and elevate security risk.