lovstudio-xbti-creator

SUSPICIOUS: the core BTI site-generation workflow is mostly coherent, but the skill expands scope through silent auto-installation, transitive skill installation, forwarding an API key to another unreviewed skill, and optional autonomous GitHub publishing. Not clearly malicious, but the trust chain and external-action footprint are broader than necessary for a simple content-generation skill.