ae-engage

SUSPICIOUS. The skill’s functions mostly match its stated Engage-management purpose, and data flows appear product-consistent, but the required ae-cli binary is not install-verifiable from the skill or public evidence provided. Because that unverifiable CLI handles tokens and can perform write operations, overall security risk is high even without clear evidence of malicious intent.