pr-media-monitor

SUSPICIOUS. The skill’s capabilities are broadly aligned with PR/media monitoring and it avoids local execution, installs, and credential-file access. The main concern is data flow integrity: news/search/social access is routed through SandBase as a third-party intermediary rather than direct official APIs, including for Tavily, Twitter/X, and LinkedIn. That proxy pattern is not inherently malicious, but it requires trusting SandBase with queries and returned platform data, so the skill is medium risk rather than benign.