ai-listening

SUSPICIOUS. The purpose and capabilities mostly align for an AI-trend collection skill, but its core workflow depends on cloning and running an unversioned personal GitHub repo, which is a disproportionate supply-chain trust requirement for a skill. Credential use is relevant to the task and the AIsa service appears legitimate, but forwarding API access through third-party code keeps risk elevated.