runpod

SUSPICIOUS: the skill’s purpose is coherent, and its main API/data flows to RunPod and R2 are expected, but trust is weakened by reliance on separately owned GHCR images, mutable tags, and unspecified fallback upload services. This looks more like a legitimate but medium-risk cloud deployment guide than malware.