Art

SUSPICIOUS. The core art-generation purpose is coherent, and the referenced install tools are mostly legitimate, but the skill adds an undocumented mandatory localhost notification call and leaves credential/data routing through Generate.ts insufficiently transparent. Risk is driven more by unclear local/network data flows than by confirmed malicious behavior.