chinese-domain-news

SUSPICIOUS: the core purpose is coherent, but the mandated reliance on an external, unpinned GitHub-hosted skill (humanizer-zh) introduces transitive supply-chain risk, and the skill combines open web research with file-writing output. No direct credential theft or overt exfiltration is present, so this is better classified as a medium-risk vulnerable skill than malware.