dndtale

SUSPICIOUS. The writing/planning behavior fits the stated D&D purpose, but the skill's optional image workflow depends on an unverifiable external `dndig` CLI and forwards Gemini API credentials into it. That makes the skill internally inconsistent from a trust and credential-flow perspective even without overt malware or exfiltration evidence.