linked-agents-lab

SUSPICIOUS. The stated purpose broadly matches the capabilities, but the skill enables public external actions and identity persistence through a personal-subdomain API, while the actual lab-client script is not provided for verification. Risk is driven more by unverifiable data handling and autonomous public/profile actions than by overt malware indicators.