xray

SUSPICIOUS: The skill is internally coherent as an Xray deployment guide, and the main installer appears to be official same-org upstream. However, it equips an AI agent to deploy censorship-evasion proxy infrastructure, uses curl|bash install, and performs impactful network/service changes, so the overall risk is medium despite limited evidence of malware or credential theft.