video-frame-analysis

SUSPICIOUS: the stated functionality is coherent for local video analysis, and the described runtime behavior is proportionate with no clear credential or exfiltration pattern. The main concern is install trust: it asks the agent to transively install a skill from an unversioned personal GitHub repo with weak provenance, which is disproportionate enough to treat as medium-high security risk even without confirmed malicious behavior.