cloudbase

SUSPICIOUS. The skill’s purpose and core capabilities are coherent for WeChat Mini Program and CloudBase work, and the scanner’s exfiltration hits look like false positives. Risk comes from transitive remote skill loading, unpinned raw/main and @latest references, and use of a third-party mcporter CLI in the auth/tooling path; these are proportionate but not low-trust enough to call fully benign.