vcr-imagegen

SUSPICIOUS: the skill is mostly coherent with its stated image-generation purpose, but it routes prompts, reference images, and a Vans-specific API key through a custom same-brand gateway via an unseen bundled script. The main risk is reduced transparency and incomplete install/script provenance, not clear malicious behavior.