douyin-realtime-hot-rise

SUSPICIOUS: the skill’s basic function is coherent, but it relies on a third-party AI Skills gateway that receives credentials and parameters, and its installation chain involves transitive skill installation with limited public verification of publisher/release provenance. No confirmed malware or hidden behavior is evident, but the trust and data-flow model is broader than a simple topical helper.