yansu-agent-cli

SUSPICIOUS. The skill’s purpose broadly matches its commands, but it centers on executing a proprietary bundled CLI and a PATH fallback with limited public verifiability. Same-org release evidence reduces suspicion of overt malware, yet the required black-box executable and autonomous cron capability make the skill high risk from a supply-chain and execution-trust perspective.