jianying-transitions

SUSPICIOUS: the skill’s stated video-transition purpose and capabilities are internally coherent, but it depends on an unverifiable external `jianying` CLI that could perform arbitrary actions on local media/projects. The skill text itself is cautious and does not show credential theft or exfiltration behavior, so this is primarily a supply-chain and execution-trust risk rather than confirmed malware.