First of all, please don't shout at me for wanting to use Skype. I know that it's evil and I fully expect all the calls and text chats going through it to be stored permanently in govt data centers, but let's pretend we don't care about that.
Assuming one installs it on Linux (if there's still a binary available), is it likely that it could spy on other applications, intercept the network traffic or scan personal files (in other words, act like spyware)?
Or maybe it's even possible for an attacker to execute random code on my computer (inject malware)?
I know that it's closed-source software, so we can't look at the source and know for sure, but maybe someone has run some tests, trying to figure out what Skype does in the background.
Edit, clarification (hopefully)
- I have used the (strong) words "spyware" and "malware" and it seems the way I wrote my question is causing a "Skype is not a virus" kind of reaction. This is of course true and I'd probably give a similar answer to a "is it a virus, yes or no" question, but that's not my actual question. Rather than a personal estimate, I'd like to know if there is reason to believe that Skype might, for instance, scan all my files for keywords and send those to some lovely security organization (either on purpose or by accident, because of a bug - however not one that requires my interaction). Again, "reason to believe" is not based on what you think of Microsoft, but by evidence or at least suspicious findings.
- Skype would usually be running as my user (i.e., called by ~/.config/autostart/Skype.desktop) so it can read all my files, just like any other program I (same user) run. I don't see why it would need root privileges to read things owned by my user, (u+r set, of course). "All my files" means all (regular) files under / that my user has read access to (think personal files, not /var/log/messages).
- As for vulnerabilities in previous versions - almost all programs have bugs and some are critical. However I'm not interested in bugs that require my interaction (say, I have to place a malicious library file somewhere).