youtrack

SUSPICIOUS: the skill’s actions fit YouTrack management, but it relies on a non-official third-party CLI and forwards a permanent API token to that external tool. Data flows are otherwise coherent and there is no clear exfiltration or malware behavior in the skill text, so this is mainly a supply-chain and credential-trust concern rather than confirmed maliciousness.