scenario-maya-expert

SUSPICIOUS. The skill is largely aligned with Maya automation and review, but it exposes an unauthenticated local code-execution bridge into Maya and instructs transitive installation of additional skills. I found no clear credential theft, hidden exfiltration, malicious endpoints, or deceptive installer payloads; the main risk is broad execution capability plus trust expansion, not confirmed malware.

This is an intentional Maya automation bridge, not clearly malware. Its unauthenticated Python command port and unrestricted execution of job files create a serious security risk if the port is reachable by untrusted users or the exchange directory is writable by them. Keep it bound to loopback or a protected local socket, restrict access to the exchange directory, and stop the bridge when not in use.