soia-pkm-clip-x

SUSPICIOUS: The skill’s core purpose is coherent, but its footprint is broader than necessary. Main concerns are transitive skill installation, wildcard agent permissions, and routing archive requests through a third-party X proxy. Telegram credential use is optional and proportionate, but sensitive. No confirmed malware behavior is shown.