gpt-imagegen

SUSPICIOUS: the skill's core behavior fits image generation, but it accesses raw OpenCode OAuth credentials and routes usage through a third-party OpenCode/Codex path instead of a clearly direct official OpenAI flow. This is a moderate trust and credential-handling risk, not confirmed malware.