ae-capability

SUSPICIOUS: the skill is mostly coherent for ae-cli capability discovery/invocation, and its external CLI dependency appears same-org and plausibly legitimate. The main concern is mandatory agent-context telemetry containing user intent and session metadata before gateway commands, which expands data collection beyond a minimal generic invocation workflow; combined with mutable npx install/update paths, this makes the skill medium risk rather than benign.