linkpix-background-swap

SUSPICIOUS: the skill’s functionality is coherent with its stated purpose, but it relies on installing and trusting an external CLI (`qhkit`) and forwarding a service token to it without a clearly verifiable same-org source/release trail in the skill itself. No clear malicious behavior or unrelated data exfiltration is shown, so this is best classified as medium supply-chain and credential-forwarding risk rather than malware.