tzai-diagram

SUSPICIOUS: this hub is mostly a thin wrapper around another skill and asks to install that external skill if missing, so the main risk is transitive trust and delegated execution rather than clear malicious behavior in this file itself. No direct credential theft or exfiltration is visible here, but the true security posture depends heavily on the unreviewed tzai-image engine skill.