dashboard-forge

SUSPICIOUS: the skill is broadly aligned with its stated purpose, but its footprint is high-risk and disproportionate in practice because it handles live admin sessions, can copy browser cookies/profiles, reads credential-adjacent local files, and performs consequential account mutations. Data flows stay local/vendor-directed rather than to unrelated third parties, so this is not confirmed malware, but it is a powerful credential-and-admin automation skill with meaningful operational risk.