autowhisper

The skill is purpose-aligned with a hosted marketing automation service and sends credentials to the same vendor domain, not an obvious third-party interceptor. However, it reads a raw token from disk, suppresses some errors, and enables autonomous public posting on connected channels, making it a high-risk but not clearly malicious skill.