byeapi-imagegen

SUSPICIOUS: The skill’s image-generation purpose is plausible, but it forces use of local ByeAPI client scripts that handle authentication and proxying, routing prompts/images/keys through a third-party compatible path rather than a clearly documented first-party API flow. No explicit malware or covert exfiltration is shown, but install/provenance transparency and data-flow integrity are weaker than expected for this purpose.