a2ui-embed

SUSPICIOUS. The skill’s purpose mostly matches its behavior and data flows stay local, but it asks the agent to execute a private, unverifiable local sidecar script. That unverifiable executable raises the overall security risk even without signs of credential theft or external exfiltration.