yuque

SUSPICIOUS: the stated purpose and capabilities mostly align, and there is no obvious malware pattern or remote installer. The main concern is credential forwarding of Yuque cookies/tokens into an unreviewed local helper, especially the browser-cookie mode using Yuque's internal web API, which leaves endpoint and exfiltration behavior unverifiable from the skill text alone.