hyperframes-best-practices

SUSPICIOUS. The core media-processing, transcription, and Gemini API usage mostly align with the stated video-production purpose, and the network flow goes to an official Google endpoint. However, the skill expands trust by instructing installation of another skill, and it suggests checking local credential sources like `~/.zshrc` and personal reference files, which is broader than a generic video-editing guide should need. This looks more like an overreaching workflow skill than confirmed malware.