d365

SUSPICIOUS. The skill’s main capabilities fit a D365 knowledge-advisor role, but it is overpowered for that purpose: it combines web research over untrusted content with file-writing, Bash execution, and an opaque dashboard sync script. The biggest concern is indirect prompt injection from conference/web content and automatic downstream actions, not confirmed credential theft or malware.