anima-base

SUSPICIOUS due to supply-chain trust issues, not overt malware: the skill is purpose-aligned for ComfyUI image generation, but it installs many third-party custom nodes, auto-fetches extra models, uses mutable unpinned sources, and defaults to a non-official mirror for core weights. No credential harvesting or malicious data routing is evident.