huashu-nuwa

SUSPICIOUS: the skill’s purpose and file-writing behavior are broadly coherent, and the primary install source appears same-publisher or official CLI-based. However, it materially increases agent risk through transitive use of other skills, ingestion of large amounts of untrusted external content while writing executable agent instructions, and broad command/file operations. No strong evidence of credential theft or confirmed malware was found.

SUSPICIOUS. The skill is mostly aligned with X/Twitter coaching, and its primary data flow stays on official X surfaces plus local storage. However, silent profile loading, persistent user-data collection, and the fallback to an unverified third-party export extension make the footprint broader and less transparent than a pure writing mentor needs.