singtel

SUSPICIOUS. The skill’s read-Singtel purpose broadly matches its capabilities, and the scanner’s command-injection hit is a false positive. However, the actual data path is an unofficial third-party intermediary (Unbrowse), not Singtel, and the skill asks the agent to add and trust a remote MCP server plus forward Unbrowse credentials to it. That proxy/trust-chain design is disproportionate to a simple site-reading skill and creates medium security risk even without clear malware indicators.