youtube

SUSPICIOUS. The skill’s capabilities mostly match its YouTube/thumbnail purpose, but core functionality is mediated by Hyper MCP and installed via a separate skills CLI, creating meaningful third-party trust and data-routing risk. No clear credential theft, hidden execution, or malware behavior is present, so this is better classified as a medium-risk, intermediary-dependent skill rather than malicious.