anibon-timestamper-local

SUSPICIOUS. The core local timestamper workflow is broadly consistent with the stated purpose and does not show overt malware behavior, but the skill's footprint extends beyond purely local processing through mandatory companion skills, PowerShell bypass launchers, and optional third-party inference endpoints that receive API keys and transcript/media content. Risk is driven more by trust expansion and optional external data flows than by confirmed malicious intent.

This fragment implements model discovery and chat/vision requests, but its default destination is 100[.]115[.]25[.]30 and it sends prompts, images, and any available API key to the selected endpoint. The endpoint can be configured, is not restricted to a trusted host, and may use unencrypted HTTP, creating a meaningful credential and data-exposure risk; the fragment does not establish that the hardcoded address is malicious. The fixed `lms ps --json` subprocess call is not visibly injectable here. The supplied text also contains an incomplete `SYSTEM_PROMPT =` assignment, so it is syntactically invalid as presented.