api-caller

SUSPICIOUS: the skill's capabilities broadly match its stated API-calling purpose, but it is high-trust by design because it can send credentials and requests to any user-specified domain and ingest arbitrary remote API specs. No clear malware indicators or malicious install path are present, but the unrestricted external data flows and raw credential forwarding make it a medium-risk generic network skill.