yuanbao

SUSPICIOUS due to autonomous outbound messaging capability and an opaque gateway path, but not malicious. The skill is largely aligned with its stated Yuanbao chat purpose, has no install-chain or credential-harvesting behavior, and its main risk is that ordinary replies become real messages/mentions/DMs without explicit per-action confirmation.