sales-devi

SUSPICIOUS: mostly a benign documentation/help skill, but it contains two notable security issues for a skill of this type: a transitive skill-install instruction and an example that routes webhook data through webhook.site, a known interception endpoint. No direct credential harvesting or code execution is present, but the webhook guidance is inconsistent with strong data-flow hygiene.