user-model-builder

SUSPICIOUS: the skill’s core behavior is coherent with persona-building, but its footprint is privacy-heavy and it routes collection through third-party scraping services plus an unverified linkedin-export subskill. The main risk is disproportionate personal-data aggregation and transitive trust/data-flow ambiguity, not confirmed malware.