llm-public-opinion-analytics

SUSPICIOUS. The skill’s capabilities largely fit its stated analytics-and-alerting purpose, and its credential flows mostly go to official endpoints. The main concern is install trust: ara.so publishes the skill, but users are told to clone and run a separate third-party repo with broad credentials and dependencies, creating a meaningful provenance and supply-chain risk rather than clear malware.