safha

SUSPICIOUS: the stated capabilities are coherent for an Arabic scraping/NLP skill, and no direct credential theft or covert exfiltration is shown. However, the core safha executable is not verifiably sourced from an official package, repo, or release channel in the provided evidence, so the skill carries high supply-chain risk disproportionate to the trust information available.