architecture-generator

SUSPICIOUS: the skill’s toy-generation purpose matches its API usage, but it routes prompts, image inputs, task data, and the required access key through a third-party gateway rather than directly to named 3D providers. The main risks are intermediary credential/data handling and unpinned `npx` execution, not confirmed malware.