ugc

SUSPICIOUS. The skill’s behavior matches its stated UGC-production purpose, and its network/media flows are proportionate. The main issue is install/execution trust: it relies on an external `genmedia` CLI distributed through official documentation but via unpinned remote-script install, with insufficient public verification evidence. This is high supply-chain risk, not confirmed malware.