moss

SUSPICIOUS. The core capability matches the stated purpose and credentials are broadly proportionate, but trust and data-flow integrity are weakened by the unexplained vm0.ai connector/zero-doctor dependency and an API endpoint mismatch with official Moss documentation. This looks more like a legitimate integration with documentation inconsistencies and third-party connector reliance than confirmed malware.