qwencloud-ops-auth

SUSPICIOUS. Core auth setup and verification are coherent and route credentials only to official QwenCloud endpoints, but the skill goes beyond authentication by pushing transitive installation of another skill through an unpinned third-party CLI with confirmations suppressed. That added trust chain is disproportionate enough to raise medium risk, though there is no clear credential harvesting, hidden exfiltration, or confirmed malware.