china-audit-xls

SUSPICIOUS. The skill’s purpose and requested data are largely coherent for A-share model auditing, but install/execution trust is incomplete because it relies on a likely third-party wind-mcp package to receive a real Wind API key, and the iFind integration path is underspecified. No direct exfiltration, stealth, or clearly malicious behavior is shown.