china-pitch-deck

SUSPICIOUS: The skill’s stated purpose is coherent with its financial-data and pitch-deck workflow, and its credential scope is mostly proportionate. However, it references a `wind-mcp` service whose official relationship to Wind is not verified in the provided evidence, creating meaningful install-trust and credential-forwarding uncertainty. No direct exfiltration, shell execution, or obviously malicious behavior appears in the skill text itself.