crucix-intelligence-dashboard

SUSPICIOUS. The skill’s capabilities mostly fit its stated OSINT-dashboard purpose, and the requested secrets are proportionate to its integrations. The main risk is install trust: it asks the agent/user to clone and execute a GitHub project from an owner not clearly tied to the claimed skill publisher, creating a meaningful supply-chain risk. Data flows to official-looking services are generally consistent with the described functionality, and there is no strong evidence of covert exfiltration or malicious concealment in the skill text itself.