cli-anything-dify-workflow

SUSPICIOUS: The skill’s stated purpose and capabilities mostly align, and the documented behavior appears limited to local workflow file operations. However, its core functionality depends on installing unpinned source directly from a personal GitHub repository on `main`, which is a disproportionate supply-chain trust risk for an agent skill even without signs of active credential theft or exfiltration.