flux-image

SUSPICIOUS: the core image-generation purpose is coherent, and the CLI/data flow to inference.sh looks legitimate, but the skill's main onboarding step delegates trust to another skill (`belt-sh/cli`) from a not-clearly-verified publisher relationship. Overall risk is driven more by transitive skill installation and external CLI trust than by malicious behavior in the stated workflow.