ai-shifu-course-creator

SUSPICIOUS: The skill’s authoring and platform-management scope matches its stated purpose, and the service endpoints look same-org. However, deployment depends on an undocumented local CLI that receives SHIFU_TOKEN and can perform high-impact live publishing and management actions, creating medium-high trust and autonomy risk despite no clear evidence of malicious exfiltration.