huawei-cloud-openviking-agent-integration

SUSPICIOUS. The skill’s core behavior mostly matches its stated purpose, but it has a broad persistent footprint across root-owned agent templates, installs external packages, and shows a publisher/provenance mismatch between Huawei Cloud branding and OpenViking’s apparent official ownership. No clear malicious exfiltration path is described, but install trust and credential/config persistence make this a medium-risk skill rather than benign.