flux-image

Purpose and capabilities mostly align with image generation via inference.sh, and the CLI provenance looks plausibly official. The main issue is the explicit transitive installation of another skill (`belt-sh/cli`) plus credential forwarding through that CLI, which makes the skill moderately risky and better classified as suspicious than fully benign.