logo-creator

The skill’s main capabilities fit its stated logo-design purpose, and there is no clear credential harvesting or exfiltration behavior. Risk comes from transitive reliance on the `replicate` skill, untrusted search content combined with Bash/write access, and an unpinned pip install fallback; overall this is better classified as suspicious/medium-risk than malicious.