anygen-doc

SUSPICIOUS: the overall purpose is coherent for a document-generation skill, and the service/domain relationship appears same-org, but the skill has medium risk because it forwards API credentials through an external CLI, exposes a command-line API-key pattern, and instructs transitive installation of another skill whose contents are not shown. No clear evidence of malware or unrelated data exfiltration was provided.