bmob-cloud-function-development

SUSPICIOUS. The skill’s capabilities are largely consistent with Bmob cloud-function development, and the endpoints appear official. The main issue is data-flow integrity: official documentation routes credentials and code through an MCP endpoint served over plain HTTP, creating a meaningful interception risk; otherwise the scope is proportionate and there is no evidence of malware or deceptive third-party installation.