effectcraft-cli

SUSPICIOUS: the core CLI/media-editing behavior is largely coherent with the stated EffectCraft automation purpose and appears tied to official upstream tooling, but the skill materially expands trust by requiring a companion harness skill and undisclosed local installer scripts. No clear credential theft, covert exfiltration, or pre-execution malware is evident; the main concerns are transitive trust and partially unverifiable install/runtime enforcement.