qinghu-douyin-video-distribute

SUSPICIOUS. The core capability matches the stated e-commerce purpose and the main credential flow stays on Qinghu-owned domains, so this is not confirmed malware. However, it centralizes tokens and marketplace operations through Qinghu instead of official service APIs, interacts with a separate ERP vendor, enables consequential storefront actions, and references an additional unverified skill, making the overall risk moderate.