qbt-hub

SUSPICIOUS. The core qBittorrent API management behavior is coherent and proportionate, but the skill forwards credentials to an arbitrary configurable host and includes a workflow that browses untrusted torrent sites before taking actions. There is no strong evidence of malware or hidden exfiltration, yet the custom host trust boundary and prompt-injection exposure make this higher risk than a simple local-only management skill.