wiki

SUSPICIOUS. The skill’s capabilities mostly match its stated purpose as a personal wiki ingest/maintenance tool, and the supplied install path is local rather than a remote supply-chain lure. However, it has broad access to very sensitive personal data (Gmail, iMessage, contacts, chat.db) and installs additional agent commands, while the provided text omits concrete Gmail auth and network endpoint details. No clear credential theft or exfiltration path is shown, so this is not malicious on the available evidence, but the privacy and file-access scope make it medium risk.