tzai-logo

SUSPICIOUS: the visible wrapper is purpose-aligned for logo generation, but it is not self-contained and pushes trust to an unreviewed companion skill installed via npx. Main risk is transitive skill installation plus opaque downstream credential and network handling, not confirmed malicious behavior in this file.