last30days

SUSPICIOUS. The stated purpose is coherent with research and prompt-generation behavior, and the documented OpenAI/xAI endpoints are legitimate. However, the skill executes an unseen local Python script, reads API keys from a local file, and processes high volumes of untrusted external content, creating medium security risk and a notable prompt-injection surface.