dreamina-canvas-cli-text2video

SUSPICIOUS: the skill’s stated purpose and commands are internally coherent for a text-to-video workflow, and its data handling is appropriately scoped. The main security issue is transitive trust: it tells the agent to install other skills, and it relies on a CLI whose official provenance is not fully verifiable from the provided evidence. No direct credential theft, exfiltration, stealth, or malicious execution is evident.