flipsnack

SUSPICIOUS: the skill is internally coherent for a hosted Flipsnack access service, and the scanner's command-injection hit is a false positive. The main risk is architectural: it routes user activity and credentials through Unbrowse, an unofficial third-party intermediary with broader browser/action capabilities than the read-only headline suggests.