a1-yandex-kit-catalog

Mostly coherent catalog-management skill with official Yandex API endpoints and good prompt-injection boundaries. The main concern is optional reliance on a third-party MCP tool/package to handle the Yandex token; that is proportionate to the task but raises medium supply-chain and credential-forwarding risk, so overall classification is SUSPICIOUS rather than malicious.