linkpix-image-eraser

SUSPICIOUS: the skill’s purpose and capabilities mostly align, but it asks the agent to install and trust an only partially verified third-party CLI, then forward an API token and local images to it. No clear exfiltration or overtly malicious behavior is shown, yet the credentialed CLI/supply-chain trust makes this higher risk than a simple documentation skill.