qinghu-tvc-ad-film

SUSPICIOUS: the skill is broadly aligned with its ad-generation purpose and uses mostly plausible official sources, but it requires installing vendor tooling and forwarding a service token into that CLI, creating moderate supply-chain and credential-trust risk. No clear malicious exfiltration or hidden behavior is present.