imagegen-frontend-web

SUSPICIOUS. The skill is mostly a pointer that instructs installation of a different remote skill, so its real footprint is delegated to unreviewed downstream content. The install path appears ecosystem-consistent and same-publisher, so this is not confirmed malicious, but transitive trust and mutable remote installation make it medium risk.