visual-validation

SUSPICIOUS. The core screenshot-capture behavior fits the stated purpose, and the Peekaboo dependency is plausibly legitimate. However, the skill forwards screenshots to an undocumented local binary (~/bin/gemini-api) with unknown provenance, creating a credential-forwarding and data-flow trust gap disproportionate to a simple visual validation skill.