wayai

SUSPICIOUS: the skill is largely coherent with a legitimate WayAI admin/dev workflow and same-org install path, but it carries medium risk from transitive skill installation, chat-based secret collection, broad shell/platform authority, and autonomous real-world actions. Not malware, but more powerful than a low-risk documentation skill.