opentrons-app

SUSPICIOUS. The skill’s purpose and capabilities mostly align, and its safety boundary is unusually explicit, but it depends on a non-Opentrons third-party GUI automation tool whose documented install path uses unpinned `curl|bash`. There is no clear credential theft or exfiltration behavior, so this is not malware, but the combination of third-party automation tooling and robot-affecting actions makes it a medium security risk.