lovstudio-image-creator

SUSPICIOUS: the overall capability fits an image-generation skill, but the end-to-end path routes prompts and API credentials through ZenMux, a third-party gateway rather than official Google endpoints. Package installs are from legitimate ecosystems, so this is not confirmed malware, but the combination of auto-install behavior, mutable dependencies, and intermediary credential/data flow makes the skill medium risk.