ai-tools

SUSPICIOUS. The skill’s dispatcher behavior broadly matches its stated purpose, and the lone scanner finding is a likely false positive. The main concern is install/execution trust: it runs unverifiable local scripts and an unspecified containerized app, then continuously routes payloads into other skills. No clear credential theft or malicious exfiltration is visible in the provided text, but provenance and transitive trust are too weak to treat as benign.