linkpix-main-image-optimize

SUSPICIOUS. The skill is broadly coherent for image optimization, but it forwards API tokens and local image files through an external CLI package rather than a directly documented API flow. Install sources are mostly legitimate and proportionate, so this is not confirmed malicious, but the external CLI trust dependency, unpinned package execution, and third-party mirror fallback make it medium risk.