qiaomu-cut

SUSPICIOUS: the skill’s stated routing purpose mostly aligns with its behavior, and the CLI install source appears official, but it overreaches by auto-installing software, launching auth, and delegating full control to other skills while telling the agent to do this silently. Main risk is transitive trust and autonomous install/auth actions, not confirmed malware or credential theft.