china-returns-analysis

SUSPICIOUS: the analytical scope matches the stated purpose, and there are no overt malicious commands or exfiltration steps, but the skill relies on external finance-data tooling—especially `wind-mcp`—whose publisher relationship to Wind is not verified in the provided evidence. The main risk is credential forwarding and supply-chain trust, not confirmed malware.