jianying-export-prep

SUSPICIOUS. The skill’s purpose, permissions, and local data flows are internally coherent and notably cautious, with no sign of credential harvesting or hidden exfiltration. However, it fundamentally relies on a preinstalled external `jianying` CLI whose publisher, source, and release provenance are not verifiable from the skill or the provided web evidence, so the required binary trust floor makes this high security risk despite low evidence of malware.