ormus-illustrator

SUSPICIOUS. The skill’s overall purpose and most provider integrations are coherent for image/video generation, and several referenced services are official. However, the undisclosed local Python scripts, Discord-based Midjourney automation, and in-script/API-session credential handling create meaningful trust and credential-management risk. No strong evidence of overt malware or credential exfiltration to unrelated domains was shown, but the hidden implementation and automation footprint keep this above benign.