tzai-flowchart

Purpose and behavior are mostly aligned for a flowchart generator, but the skill is mainly a thin wrapper around an unreviewed external engine skill. The main concern is transitive installation and execution trust: it instructs installing another skill and then runs that local script with implied API-key use, so overall this is suspicious-to-medium risk rather than malicious.