generate-pindou

SUSPICIOUS: the skill’s purpose and basic capability align, and its single API key requirement is roughly proportionate, but it routes credentials and user content through a third-party DeepNLP gateway instead of a direct first-party service endpoint. The optional external CLI path adds moderate supply-chain trust risk. No confirmed malware or hidden execution is present in the provided skill text.