lead-signals

SUSPICIOUS. The skill’s capabilities broadly match lead-signal discovery, but its trust model centers on treg.to as a routing proxy and optional secret-holding executor for third-party providers. Because install is same-org and open-source, this is not malware, but credential forwarding, proxied data flows, and recurring agent-token automation make it medium risk rather than benign.