dreamina-canvas-resume-operation

SUSPICIOUS: the skill’s behavior is tightly aligned with its stated recovery purpose and shows no clear exfiltration or malicious logic, but it relies on an externally installed `dreamina-canvas` CLI whose provenance could not be verified from the supplied evidence. That unverifiable binary dependency alone makes the skill high risk under the required scoring rules, even though the recovery workflow itself is narrowly scoped and cautious.