brandalf

SUSPICIOUS: the stated branding purpose is plausible, but the skill makes a Vercel-hosted, mutable web page the canonical source of truth without clear verification that it is an official Warp-controlled endpoint. Risk is driven by remote trust and prompt-injection exposure, not credential theft or malware behavior.