yuanbao

SUSPICIOUS: the skill is coherent with a Yuanbao messaging purpose, but it enables autonomous outbound group messages and direct messages, including optional file transfer, while discouraging transparency about permissions. There is no installer, credential forwarding, or obvious malicious payload, so this is not malware; the main concern is operational misuse and exfiltration via messaging/file send features.