fal-generate

SUSPICIOUS: this skill is largely a catalog pointer that asks the agent/user to install an external upstream skills bundle. There is no direct credential theft or exfiltration in the provided text, but the transitive remote-install trust chain and only partially verified publisher relationship make it medium risk and not fully proportional to a simple discovery entry.