figure-composer

SUSPICIOUS: the core figure-composition purpose is coherent, and there is no clear credential theft or exfiltration behavior, but the skill relies on unpinned transitive skill loads and delegates untrusted vision-derived content through sub-agents in a write/exec-capable workflow. Risk is medium due to trust-chain and indirect prompt-injection exposure rather than confirmed malware.