instagram-movie-producer

The skill’s stated purpose is coherent, but its actual execution path is not well-scoped: it depends on an unverified external `astria` CLI and likely forwards credentials to it, despite official Astria documentation showing direct API usage instead of a documented CLI. That makes the skill suspicious mainly for supply-chain and credential-forwarding risk rather than for overtly malicious behavior.