video-studio

SUSPICIOUS. The skill’s editing capabilities mostly match its stated purpose, but the real trust boundary is the unseen install.sh and the layered external toolchain, including a bundled browser download and telemetry-capable CLI. No clear credential-harvesting or malicious exfiltration is shown, yet install trust and opaque setup steps are disproportionate enough to warrant caution.