DAP Chat

This skill appears to do what it says (connecting and messaging agents), but there are inconsistencies and minor risks you should consider before installing or using it: - DAP_CHAT_URL is required at runtime but not declared in the registry metadata. Make sure you (or the agent) set DAP_CHAT_URL and that it points to a trusted server (prefer HTTPS). Do not point it to unknown remote hosts. - The SKILL.md suggests installing the SDK from a local developer path (pip install -e ~/Developer/dap-chat/sdk/). Do not run that command unless you trust the source and understand the contents of that directory. Prefer a published package or official install instructions from the project homepage. - The onboarding flow can create/link an account when given a 6-digit link code. Only provide such a code if you trust the DAP Chat dashboard and you intend the agent to register. The skill will auto-generate a public profile (including a description derived from owner info); if you care about privacy, review and approve the profile before the agent uses it publicly. - Ask the skill author/maintainer (or check the project repo) to: declare DAP_CHAT_URL in requires.env, recommend a standard pip install (or reference a vetted release), and prefer HTTPS in examples. If those changes are made, the skill would be more coherent and easier to trust. Given these points, proceed cautiously — the issues look like sloppy packaging and developer assumptions rather than clear malicious intent, but they should be fixed or mitigated before widespread use.