ai-intelligence-investigator

SUSPICIOUS. The core search/investigation purpose is coherent, and there is no malware-like installer or hidden execution path. But the skill automatically sends complete reports and an API credential to a third-party RedFox endpoint, and the documented auth details do not fully match official RedFox docs. This makes it a medium/high security-risk skill due to third-party data retention and documentation inconsistencies, not confirmed malware.