dreamina-canvas-discover-models

The skill’s stated purpose and commands are internally consistent: it only performs capability discovery for Dreamina workflows and avoids hard-coded values. The main issue is trust in the required `dreamina-canvas` binary itself: public evidence does not establish a verifiable official release path, and related public install instructions use curl-to-shell patterns. That makes this a suspicious supply-chain dependency rather than confirmed malware.