renoise-cli

SUSPICIOUS. The skill’s media-generation purpose is plausible, but its 'local-only' claim is inconsistent with extensive remote API use. The main risk is trust concentration in an auto-installed external CLI and installer scripts whose provenance is only partially verified; that CLI also handles auth and uploads, creating high supply-chain and credential-forwarding risk despite otherwise purpose-aligned functionality.