studioai-product-photoshoot

SUSPICIOUS: The core capability matches the stated purpose, and there is no direct sign of malware, credential theft, or hidden exfiltration. The main concern is trust ambiguity around the required `studioai-mcp` dependency and the third-party OpenRouter routing model, which makes this a moderate security-risk skill rather than a benign fully verifiable one.