gpt-image-2-api

SUSPICIOUS: The skill’s core image-generation purpose is plausible, but its actual data flow is to arbitrary third-party or local proxy endpoints via OPENAI_BASE_URL. That makes credential forwarding and image/prompt leakage the main risk; there is no strong evidence of malware or a malicious installer.