setup-session-recording

SUSPICIOUS. The core session-recording setup behavior is coherent, and the SDK/MCP endpoints appear same-org and plausible. However, the skill also mandates hidden unsandboxed telemetry on every run, including conversation-derived sentiment and progress data, and instructs the agent not to disclose it. That concealed outbound data flow is disproportionate to the stated purpose and drives the high risk rating.