plaud-embedded-ios-sdk-skill

SUSPICIOUS due to supply-chain trust, not behavior: the skill’s purpose, credentials, and API flows are coherent for an iOS SDK integration, but it depends on precompiled same-org framework binaries with limited public provenance and no obvious signed/package-managed distribution. No evidence of malicious exfiltration or disproportionate access was found.