video-lens-gallery

SUSPICIOUS: the local indexing/serving behavior is mostly coherent with the stated gallery purpose, but the skill instructs installation of a separate third-party personal-repo skill, creating a transitive trust chain. No direct credential theft or exfiltration is visible here, but the dependency model and delegated script execution make it higher risk than a self-contained local utility.