anna-archive

SUSPICIOUS. The skill’s basic network behavior matches its stated retrieval purpose, but it inconsistently claims authenticated API support where no official API exists and requests an ANNA_SELF token that the examples do not actually need. The main security concern is moderate supply-chain and credential-scope risk from unofficial wrappers and ambiguous auth handling, not confirmed malware or active exfiltration.