personal-tech-design

SUSPICIOUS: The skill’s purpose and capabilities are mostly coherent, but it depends on a non-official third-party yuque-mcp server that likely receives a personal Yuque token and document contents. This is not clearly malicious, yet the trust model and credential routing are under-specified enough to warrant caution.