qe-stream-chain

SUSPICIOUS: the documented purpose is coherent, but the skill delegates its core behavior to an ambiguously sourced `claude-flow` CLI with fragmented provenance, unpinned installation paths, and documented credential forwarding/persistence. The markdown itself is not overtly malicious, yet the external dependency trust and data-flow uncertainty are disproportionate enough to treat the skill as medium-high risk.