byted-las-long-video-understand

SUSPICIOUS. The skill’s purpose and cloud data flow generally match long-video analysis, but its core footprint relies on an unverifiable lasutil CLI plus auto-update/init scripts that receive API credentials. That trust gap is the main issue; this looks more like a high-risk supply-chain/credential-forwarding problem than confirmed malware.