linkpix-tiktok-shop-image

SUSPICIOUS: the skill's core purpose and data flows are mostly coherent for an image-generation integration, but it requires giving a Qinghu API token to an external CLI and mixes several installer paths, including mirrors and transient package execution. This is not fundamentally incompatible with the stated purpose, but the install trust and credential-forwarding footprint is broader than ideal, so medium risk is warranted.