dreamina-canvas-cli-setup

SUSPICIOUS: the skill is purpose-aligned for CLI installation, but its actual footprint relies on remote script execution from non-registry URLs, includes a less-verifiable overseas installer, and extends trust by installing other skills. No clear credential theft or malicious exfiltration is present, but install/execution trust is high-risk and insufficiently verifiable from the provided evidence.