marketingdashboard-financial-cockpit

SUSPICIOUS: the skill’s purpose is coherent, but install trust is weak because an ara.so-branded skill asks users to clone and run a separate personal GitHub project with npm dependencies. Credential use is limited and proportionate, yet the repo/publisher mismatch and unclear upstream API provenance make this medium risk rather than benign.