ryux-core

SUSPICIOUS. The skill’s stated purpose is coherent and the content is mostly workflow guidance, but it asks users to trust a remote MCP endpoint on an unverified vendor domain and to load additional related skills. There is no direct malware behavior, credential harvesting, or dangerous execution pattern in the text itself, yet the remote-connector and transitive-skill trust model make the overall risk medium.