demo-builder

SUSPICIOUS: the core file generation behavior fits the stated purpose, and there is no direct malware or command execution trick in the SKILL text. Risk comes from disproportionate trust dependencies: a third-party transitive skill, CDN runtime loading, and optional music generation via a Suno-related intermediary domain rather than a clearly official API. Overall this is coherent as a game-demo builder, but its external trust chain is broader than necessary.