YunxiaoPM

SUSPICIOUS: most of the skill is coherent PM automation using the official Alibaba Yunxiao CLI, but `accept_release.py` materially breaks the stated trust model by harvesting local browser/session cookies and calling internal web APIs directly. That inconsistency, plus transitive skill invocations and an unseen mandatory auto-update script, makes the skill higher-risk than its stated purpose suggests, though not confirmed malware.

This module is best characterized as high-impact automation with a significant credential-handling/privacy risk: it can harvest user browser cookies/XSRF tokens (or a local temp cookie cache) and then use them to perform authenticated, business-critical mutations (create/patch/transit/tag/time-tracking) against devops.aliyun.com. While the current main() entry point is disabled and prevents immediate execution in this fragment, the underlying capability remains present in the code and would become an acute risk if invoked elsewhere. There is also potential RICHTEXT content propagation without sanitization, which could amplify the impact of malicious/unsafe document content if it is sourced from untrusted inputs or remote descriptions.

This module is primarily an authenticated API client that fetches tag lists from devops.aliyun.com. The key security concern is that it harvests browser cookies (and an additional cached token file from the system temp directory) and forwards them as an HTTP Cookie header for network requests. While the outbound destination appears limited to the intended DevOps domain(s), this credential/session-material handling pattern is high-sensitivity and commonly associated with credential misuse if the package were altered or repurposed. No classic malware indicators (reverse shell, eval/exec, persistence beyond temp reads) are present in the shown code.

This module is a credential-harvesting automation tool pattern: it reads Chrome cookies (and optionally a cached temp cookie file) for Aliyun/DevOps domains, forwards them as Cookie/XSRF headers in an outbound request to devops.aliyun.com, and then enumerates/matches project information using the authenticated session. No overt malware (e.g., persistence, command execution) is present in the shown code, but the harvesting and network reuse of browser session cookies is a severe security risk and is consistent with supply-chain abuse potential.