YunxiaoPMapp

SUSPICIOUS: the core Yunxiao workflow purpose is coherent, but the skill is not fully self-contained and relies on unverified external skills and unseen local scripts for content processing and write operations. No direct credential theft or malicious exfiltration is visible, yet the transitive trust and opaque execution path make it medium risk.