ecdash-api

SUSPICIOUS: the skill is broadly consistent with managing a personal dashboard, but it accesses a raw secret file and forwards that credential to a personal Railway-hosted API. There is no clear malware behavior or hostile installer chain, yet the credential handling and endpoint trust are more fragile than a standard official integration.