douyin-traffic-dashboard

SUSPICIOUS: the skill’s purpose and API usage are broadly consistent, but it is essentially a hosted third-party wrapper that forwards an API key and request data to ai-skills.ai and relies on a transitive CLI/`skills add` installation path with limited provenance detail in the skill itself. No clear exfiltration beyond the declared service call is shown, so this is not confirmed malware, but the trust and credential-routing footprint is larger than a simple local dashboard helper.