picoclaw-ai-assistant

SUSPICIOUS. The skill’s purpose and capabilities mostly align, and the web/API credentials are proportionate for an AI assistant, but the main risk is install trust: the skill is published by ara.so while execution depends on downloading and running a third-party precompiled binary from the sipeed GitHub repo. Data flows are otherwise consistent with the stated assistant function, with no clear credential exfiltration or hidden behavior shown in the skill text.