qwen-image-2-pro

SUSPICIOUS: the core image-generation purpose is coherent, and the data path to inference.sh appears consistent with the platform, but the skill adds unnecessary trust expansion by requiring installation of another skill/CLI, with a namespace mismatch (`belt-sh/cli` vs `inference-sh`) that is not clearly justified. This is more consistent with medium supply-chain and credential-forwarding risk than confirmed malware.