nby-jimeng-api

SUSPICIOUS. The skill’s high-level purpose is coherent, but its actual trust boundary is not: it asks the agent to run an unpinned third-party Docker image from a mismatched publisher path and forward a raw Jimeng session credential into it. The localhost API framing hides that the container is a reverse-engineered upstream proxy, so the main risk is supply-chain plus credential exposure rather than overt malware.