xhs-note-breakdown

SUSPICIOUS. The standalone xhs-note-breakdown skill is mostly harmless instructional analysis and is proportionate to its purpose, but it funnels users toward a separate Lingzao main skill with remote installation, API-key-to-shell-script forwarding, and only partially verifiable provenance. Risk comes from the upgrade/install trust chain more than from this sub-skill’s own behavior.