724-office-ai-agent

SUSPICIOUS. The skill’s broad capabilities are mostly consistent with a self-hosted agent, but its footprint is high-risk: it executes arbitrary Python, can hot-load self-created tools, accepts webhook input, stores long-term memory, and may launch extra MCP tooling. Installation trust is weakened because ara.so publishes the skill while the actual code comes from an unrelated personal GitHub repo with no pinning or release verification. This looks more like a risky third-party agent wrapper than confirmed malware.