quickdesign

SUSPICIOUS: the skill’s media-generation behavior is broadly consistent with its stated purpose, but it depends on an unverifiable proprietary CLI that handles authentication and uploads user media to undisclosed backend services. That combination creates high supply-chain and credential-forwarding risk even though the visible instructions themselves are not overtly malicious.