artboard

SUSPICIOUS. The skill's purpose and core capabilities are coherent for storyboard generation, and the data flow appears to target first-party Astria infrastructure rather than an obvious exfiltration service. However, it depends on an `astria` CLI whose install provenance is not verifiable from the supplied evidence, and it routes user content through third-party CLI/API infrastructure with transitive trust in another skill. This is not confirmed malware, but it carries high supply-chain risk for an AI agent skill.