aramco

SUSPICIOUS: the skill’s core purpose is plausible, but it routes all Aramco access and authentication through an unofficial third-party intermediary (Unbrowse) rather than direct official endpoints. No confirmed malware or real command injection is present, yet the third-party credential/data routing and broader-than-advertised Unbrowse tool surface create meaningful trust and data-flow risk.