photocraft-use

SUSPICIOUS: the skill’s editing/install capabilities are mostly aligned with its stated PhotoCraft purpose, and the flagged command-injection findings appear non-executable. However, it expands trust by requiring installation of another skill and then using that harness to install and run a third-party PhotoCraft runtime/desktop, so the overall footprint is broader than a single editing guide and carries meaningful supply-chain and transitive-trust risk.