pitch-gen

SUSPICIOUS. The stated purpose is benign and the capability is mostly aligned, but install trust is weakened by the mismatch between the advertised unscoped `ai-pitch` command and the verified LXGIC-owned scoped package `@lxgicstudios/ai-pitch`. Data handling is also underspecified because the skill claims GPT-backed generation without naming the provider or endpoints. No clear signs of credential theft or overtly malicious behavior were found.