plaud-embedded-project-setup-skill

SUSPICIOUS: The skill’s stated purpose is coherent and mostly aligned with Plaud’s official docs and APIs, but it undermines that trust by recommending a Vercel-hosted playground to handle real Plaud secrets. No malware or direct payload execution is present, yet the credential-routing choice and transitive skill delegation make the skill medium risk.