antvis-chart-skills

SUSPICIOUS: the skill is mostly a loader/catalog stub that installs other skills, so its main risk is transitive trust. The downstream repo appears to belong to the AntV org and the documented data flow to antv-studio.alipay.com is disclosed and proportionate to hosted chart rendering, but users should treat it as medium risk because it expands the agent's trust boundary to 8 installed skills and sends chart data off-box for one rendering path.