scroll-world

SUSPICIOUS: the core media-generation and file-writing capabilities mostly match the skill's stated purpose, but the trust model is weaker than ideal. The main concerns are the default routing of generated media through Monid as a third-party gateway, credentialed use of multiple external CLIs, and explicit transitive installation of another skill. These are medium security risks and data-flow concerns, not confirmed malware.