qwen-dispatch

SUSPICIOUS. The purpose is plausible, and reading ~/.qwen artifacts fits the workflow, but the skill’s actual execution path relies on undocumented wrapper CLIs and unspecified backend endpoints. That mismatch creates material supply-chain and data-flow uncertainty without clear evidence of outright malware.