domo-data-generator

SUSPICIOUS. The skill's capabilities and Domo credential needs broadly match its stated purpose, and data flows appear aimed at official Domo use. However, it asks the agent to install and trust an unpinned CLI directly from a personal GitHub repo, then pass Domo credentials to that code; this is a disproportionate install-trust and credential-forwarding risk for a skill.