game-3d-assets

SUSPICIOUS: the skill’s overall purpose is coherent for a 3D asset pipeline, and most external sources are plausibly relevant. The main concern is integrity and scope: it reads raw API keys from .env and forwards them to local scripts whose code is not provided, so the actual credential and network behavior cannot be verified. Risk is medium rather than malicious because the stated endpoints and downloads are largely consistent with the declared asset workflow.