he4rt-marketing-extension

SUSPICIOUS: the skill is largely coherent with its stated analytics purpose, but it enables passive interception of browsing data and includes optional forwarding of captured analytics plus API token to a custom backend endpoint that is not strongly verified in the evidence. This is not confirmed malware, but it carries meaningful privacy and trust risk from unpacked extension installation and optional off-platform data sync.