gemini-image

SUSPICIOUS: the skill’s core function is image generation, but it brands itself as Gemini while routing credentials and content to a third-party proxy API. No malware or installer abuse is evident, yet the endpoint mismatch and direct credential forwarding make the data flow higher risk than a direct official integration.