lark-coding-agent-bridge

SUSPICIOUS: the skill’s capabilities mostly match its stated bridge purpose, but trust is weakened by unclear publisher/upstream alignment and by routing remote chat input into a locally authenticated coding agent with optional full-access modes and persistent background service behavior. This looks more like a high-risk integration skill than confirmed malware.