dashboard-forge

SUSPICIOUS. The skill is internally coherent for supervised dashboard automation, and there is no clear evidence of malware or third-party credential exfiltration. However, its footprint is high risk by design: it copies live session cookies, drives authenticated admin consoles, captures bearer tokens, and performs real-world account mutations. This belongs to its stated purpose, but the permissions and credential exposure are powerful enough that the skill should be treated as a high-risk administrative automation tool rather than a benign helper.