meta

SUSPICIOUS: the skill's behavior is mostly aligned with its SAP routing purpose and it does not expose obvious credential theft or exfiltration paths, but the install provenance is weak and unverifiable, and its transitive control over many other skills/agents expands trust beyond what is directly reviewed. Main concern is supply-chain and inherited-permission risk, not confirmed malware.