wonda-cli

SUSPICIOUS: the skill is broadly aligned with its stated content/social-automation purpose and uses an apparently official same-vendor install path, so it is not confirmed malware. However, it grants high-risk autonomous capabilities: public posting, messaging, account actions, mobile signup automation with throwaway inboxes, stealth browser control, and transitive skill installation while also consuming untrusted external content.