markdown-to-image

SUSPICIOUS. The skill’s capability matches its purpose, and there is no clear sign of credential theft or malware. However, it relies on runtime execution of an unpinned third-party npm CLI and sends user/local file content to a remote API, while publisher/package ownership could not be fully verified from the evidence.