flightaware

SUSPICIOUS. The travel-monitoring behavior broadly matches the stated purpose, but the core `flightaware` CLI is an undocumented and unverifiable dependency, and the skill's 'no key required' model conflicts with FlightAware's documented API authentication. The autonomous cron monitoring and silent-action directives add medium operational risk even though there is no clear evidence of credential theft or overt exfiltration.