cloudrelay-imagegen

SUSPICIOUS: the skill's image-generation behavior is coherent, but its core design routes multiple providers' credentials through CloudRelay's own gateway instead of official provider APIs, and it reads raw local credential stores before making network calls. No exploit code or overt exfiltration beyond the stated gateway use is visible, but the third-party credential forwarding and secret handoff via chat make the skill medium-high risk.