image-to-code

SUSPICIOUS: the skill is mostly a redirect that tells the agent to install another skill from a personal GitHub repository. The command uses a legitimate CLI, but it delegates trust to unreviewed remote skill content and adds a transitive trust risk disproportionate to the minimal local functionality.