wan

SUSPICIOUS: the core API usage is coherent for a Pixazo-based Wan skill and does not install code, but it routes user data and credentials through Pixazo rather than official Alibaba endpoints, stores the key in a local dotfile, and includes unrelated wildcard transitive skill installation guidance. Risk is medium due to third-party credential/data mediation and transitive trust, not confirmed malware.