poster

BENIGN in purpose and data flow: this is a documentation-style rendering skill scoped to local visual asset generation, with no credential access, network routing, or autonomous external actions. Main risk is supply-chain/black-box trust in the required `poster_render` tool: its provenance is not verifiable from the provided evidence, so security risk stays high under the mandatory unverifiable-dependency rule despite no signs of malicious intent in the skill text itself.