qwen-mm-plugins-mhs

SUSPICIOUS: the skill is purpose-aligned and not overtly malicious, but it has a high-risk footprint because it enables direct real-world hardware control and forwards data/tokens to arbitrary user-configured adapter services. Install trust is mostly benign and same-org documented; the main concern is the broad trust boundary and autonomous physical actions, not credential theft or hidden exfiltration.