photo-editor

SUSPICIOUS: the core image-generation purpose is plausible, but the skill requires a gateway credential and routes all prompts/images through a third-party intermediary instead of a direct provider API. Same-org documentation reduces the chance of outright malware, yet credential forwarding, transitive CLI trust, and proxy-style data flow make the skill medium-to-high risk for a developer agent.