enterprise-user-management-system-ai-analytics

SUSPICIOUS: the documented capability fits the stated purpose and data flows stay local, but install trust is weak because the skill publisher does not match the code source and setup relies on unpinned third-party dependencies. This is not confirmed malware, but it has meaningful supply-chain risk.