tzai-ui

SUSPICIOUS: the stated purpose is coherent for UI image generation, but the skill is mainly a wrapper that discovers and executes another local skill and instructs transitive installation of that dependency. No direct exfiltration or overt malicious behavior is shown here, but install trust and downstream credential/data flow are insufficiently transparent.