direct-messages

SUSPICIOUS: the skill's capabilities match its stated DM-automation purpose, but it automates private messaging and conversation export through browser-console scripts running in the user's authenticated X session. There is no third-party credential forwarding or remote payload, so this is not confirmed malware, but it carries meaningful security and abuse risk due to broad session access, private-message export, and autonomous messaging on the user's behalf.