anygen

SUSPICIOUS. The stated purpose is coherent with using a hosted generation service, and the domain/CLI appear related to the same publisher, so this is not clearly malicious. However, trust is weakened by missing verified official install/release documentation for the exact CLI workflow, direct API-key pasting guidance, and transitive installation of another skill, making the overall footprint higher risk than a well-documented benign integration.