xhs-account-diagnosis

SUSPICIOUS: the core sub-skill is a benign analysis prompt, but it includes a disproportionate upgrade path that installs another skill from a separate source and introduces API-key forwarding. The main concern is transitive trust expansion beyond the lightweight stated purpose, not confirmed malware in this file itself.