audience-research

SUSPICIOUS: the skill’s stated purpose is coherent, but its actual data flow relies on SandBase as a third-party intermediary for platform access rather than official service endpoints. With no installs, credential harvesting steps, or action-taking behavior, this is not confirmed malware, but the proxyed API model creates a medium trust and data-flow risk.