pandaai-factor-online

SUSPICIOUS: The skill’s purpose and capabilities largely align, and data flows target PandaAI’s official domain, but its core dependency is an unaffiliated third-party CLI installed from PyPI and entrusted with user credentials and tokens. That install/credential-forwarding model is disproportionate enough to raise material security risk without proving malicious intent.