photocraft-cli

SUSPICIOUS: overall coherent as a PhotoCraft automation skill with mostly local, pinned-tool workflows, but it relies on transitive sibling-skill installation and has a broader execution footprint than its concise description suggests. I do not see confirmed malicious behavior or obvious credential exfiltration, but the indirect install chain and bundled-script trust make it medium risk.