tencent-survey

SUSPICIOUS. The core survey-management capabilities and Tencent credential scope fit the stated purpose, but the mandatory remote update check that returns executable-style instructions introduces a notable supply-chain/social-engineering risk. Without the actual `setup.sh` and confirmed backend endpoints, trust is incomplete, so this is not fully benign.