clarvia-aeo-check

SUSPICIOUS: the skill's purpose is coherent, but its trust chain is weak. It asks the agent/user to install and query an external scoring service whose package/repo/domain ownership could not be cleanly verified from official first-party sources, and it may send private tool URLs or endpoints to that provider. This looks more like a risky third-party integration than confirmed malware.