linkpix-video-role-swap

SUSPICIOUS. The skill’s core capability matches its stated video-role-swap purpose, but it depends on installing and running an external CLI, may bootstrap Node, and forwards the user’s token and media through that CLI to a remote service. The install sources are mostly coherent and partly verified by checksum guidance, so this is not confirmed malware, but the external CLI trust boundary and mirror fallback create meaningful security risk.