gisoo

SUSPICIOUS: the skill is coherent with its stated purpose and uses the publisher’s own domain, so it is not clearly malicious. However, it routes prompts, files, and credentials through a third-party aggregation gateway and remote MCP server rather than official model vendor APIs, creating meaningful privacy and credential-forwarding risk.