zopia-skill

SUSPICIOUS. The skill’s capabilities and credential scope fit its stated Zopia video-creation purpose, and the expected data flow is to zopia.ai. The main concern is install trust: the skill is distributed through a transitive skill-install chain and a personal GitHub repo without a clearly verifiable same-org release trail, which raises medium supply-chain risk but does not by itself indicate malware.