fal-regenerate-3d

SUSPICIOUS. The skill's purpose and capabilities are broadly aligned for media generation, and data appears to flow to official fal.ai services. However, it depends on a third-party-installed CLI with curl|bash installation, forwards the user's FAL key to that CLI, and introduces a transitive skill-install trust chain; these are proportionate but materially increase risk. No evidence of credential theft, unrelated exfiltration, or malicious endpoint routing was found.