product-demo

SUSPICIOUS. The core purpose and requested data are mostly aligned with UI-demo generation, and the network flow to Ofox is disclosed. The main risk is transitive trust: this skill is only a wrapper around another skill's shell script and may instruct installing that missing skill via a remote skills registry, creating mutable supply-chain exposure. No confirmed malware or covert exfiltration is evident from this skill alone.