enrich-knowledge-graph

SUSPICIOUS: the skill’s enrichment purpose broadly matches its capabilities, but it routes sensitive personal data and payment-backed requests through the AgentCash/stableenrich intermediary rather than direct provider APIs. Because the CLI is official npm-distributed and the workflow is user-guided, this is not confirmed malware, but it carries meaningful privacy, payment, and third-party trust risk.