rombot-cli

SUSPICIOUS. The core behavior fits a community Q&A skill, but it relies on transitive skill installation, a nonstandard WhatsApp token flow, and an opaque remote endpoint. The footprint is not overtly malicious, yet install trust and credential handling are only partially transparent, so medium risk is appropriate.