yuanbao

SUSPICIOUS: The skill is aligned with group messaging, but it grants the agent autonomous outbound communication and file-sending capability with minimal user-friction. No malicious installer, credential theft, or off-platform exfiltration is shown, yet the ability to send DMs/group messages and attach local files creates meaningful abuse risk.