generated-photos

SUSPICIOUS. The skill’s stated purpose is plausible, and the CLI install source looks legitimate, but the real integration is primarily with Membrane, not directly with Generated Photos. Authentication, credential storage/refresh, and API requests are routed through a third-party platform, which is a meaningful trust-boundary expansion and medium security risk, though not strong evidence of malware.