yandex

SUSPICIOUS: the skill’s stated purpose matches its commands and the CLI appears to come from an official same-org npm/repo trail, so this is not overt malware. The main concern is data-flow integrity: Yandex access is proxied through ClawLink, which holds OAuth tokens and intermediates actions instead of using direct official Yandex APIs from the agent.