puda-manual-ui

SUSPICIOUS. The skill is purpose-aligned for manual machine-control dashboards and does not show overt credential theft or covert exfiltration, but it relies on an unverifiable `puda` CLI as the core execution path and enables direct real-world machine actions. Main risk is install/execution trust plus operational impact, not confirmed malware.