imagegen

The core image-generation purpose is coherent, but the fallback path is security-sensitive: it reads a local API key file and sends credentials and prompts to an arbitrary auth.json-defined endpoint, potentially a third-party proxy. The skill is better classified as suspicious/high-risk for data-flow and credential-forwarding reasons, not confirmed malware.

SUSPICIOUS. The stated purpose is coherent for image generation, and there is no malware-grade installer or pre-execution payload. However, the fallback path reads a raw API key from disk and forwards it to an arbitrary endpoint/proxy, which weakens data-flow integrity and creates meaningful credential-forwarding risk disproportionate to a normal official-API integration.