yapi

The skill's core YApi querying/sync behavior is plausible, but its main install flow is not self-contained: it directs the agent to install a different skill/repo and rely on external CLI components. Data flows mostly match the stated purpose, yet the transitive skill installation makes the footprint disproportionate and raises the classification to suspicious rather than benign.