china-process-letter

SUSPICIOUS. The core skill content is a benign drafting guide, but it introduces a third-party `wind-mcp` integration and requests a Wind API credential despite not needing direct data access to perform basic letter drafting. No overt malware or exfiltration is shown, but install trust and credential-forwarding are not fully proportionate to the stated purpose.