qiaomu-info-card-designer

SUSPICIOUS: the core card-generation workflow is coherent, and installs appear proportionate, but the skill routes arbitrary URLs through third-party proxy services and processes untrusted remote content with file-writing/rendering capabilities. Main risk is data-flow leakage and prompt-injection exposure rather than confirmed malware.