gnome-wayland-rdp

SUSPICIOUS rather than malicious. The skill’s purpose, credentials, and network behavior are largely coherent with GNOME headless RDP debugging, and it relies mainly on official GNOME/Microsoft-documented components. The main issue is the bundled prebuilt libnofuseabort.so loaded via LD_PRELOAD without verifiable provenance; that black-box binary makes install trust high risk even though there is no clear evidence of exfiltration or deceptive behavior.