product-reel-generator

SUSPICIOUS: The skill's capabilities mostly match its stated video-production purpose, and its main outbound API target appears to be the claimed vendor rather than a credential-harvesting proxy. However, it reads raw secrets from .env, scrapes arbitrary user-supplied websites with Bash-enabled tooling, and references an unverifiable local helper script, creating meaningful but not clearly malicious supply-chain and data-handling risk.