dreamina-cli

SUSPICIOUS/HIGH-RISK rather than confirmed malware. The skill's purpose and behaviors are coherent for a Dreamina CLI wrapper, but it relies on an externally installed CLI distributed through official-domain pipe-to-shell with no visible checksum/signature/source verification, and that CLI handles OAuth/session credentials. That makes the skill proportionate in purpose but high risk in install trust and credential exposure.