krea2-identity-edit

SUSPICIOUS. The skill's purpose and local data flow are mostly coherent and it does not appear to harvest credentials, but it depends on unofficial community-distributed model/plugin components from mutable third-party sources. This is primarily a medium supply-chain trust risk, not confirmed malware.