video-edit

SUSPICIOUS. The skill’s capabilities mostly match its stated video-editing purpose, and its data flows appear proportionate: local media processing plus optional official Anthropic/Auphonic API use. The main concern is install trust, especially the unpinned dependencies and unverifiable local npm dependency tree under scripts/video_effects; without that package manifest or code files, the full execution footprint cannot be confirmed. No clear credential harvesting, covert exfiltration, or malicious mismatch is evident from the skill text alone.