3d-printing-generator

SUSPICIOUS: the skill's 3D-generation purpose is coherent, and it does not request disproportionate local access, but all requests and the API key flow through a third-party gateway instead of the official provider APIs. The `npx onekey` path is same-ecosystem and documented, so this is not confirmed malware, but the intermediary credential/data routing and runtime package execution make it a medium-risk skill.