image-skill

SUSPICIOUS: The skill's image-generation purpose matches its core behavior, but it relies on mutable `npx @latest` execution, routes all work through Luxin's hosted runtime, and asks the agent to install another skill transitively. These are medium-risk trust and supply-chain concerns rather than confirmed malicious behavior.