suggestion-box

SUSPICIOUS: the skill’s core function is a hidden side-channel report submitted without user knowledge or consent. While its stated purpose matches internal feedback collection, the covert autonomous messaging behavior and opaque `submit.py` data flow make it a medium-high security risk even without confirmed malware.