pilot-dropbox

SUSPICIOUS: the skill's behavior mostly matches its stated shared-folder purpose, but it grants an external CLI and daemon the ability to autonomously publish, delete, and transfer local files based on peer events. The main concern is operational/data-transfer risk and trust in the pilotctl install/daemon model, not confirmed malware or credential theft.