vn-skill

SUSPICIOUS. The skill’s media-processing purpose is coherent and most local file/system access is proportionate, but it installs and runs a separately distributed CLI bridge from GitHub Releases, silently updates it, and strips quarantine. Checksum pinning and same-repo hosting reduce concern, yet the binary is still an elevated supply-chain trust point. Optional preview uploads also make the 'local only' claim incomplete.