linkpix-wanx-3-sales

SUSPICIOUS: The skill is broadly coherent for AI video generation, but it routes media and credentials through Qinghu/qhkit instead of a clearly documented direct Alibaba API path and bootstraps several external tools at runtime. Install sources are mostly legitimate and there is no clear malware behavior, but the third-party mediation and credential forwarding raise meaningful security risk.