google-veo

SUSPICIOUS: the skill’s purpose is plausible, but its actual footprint relies on third-party mediation through inference.sh, broad belt command permissions, mutable install docs, and a transitive skill install whose publisher relationship is not clearly verified. This is more a gateway to an external platform than a direct Google Veo integration, so risk is medium-high even without confirmed malware.