aso-appstore-screenshots

SUSPICIOUS. The skill’s overall purpose and capabilities are mostly coherent for ASO screenshot generation, and its local file access plus image-processing commands are proportionate. The main risk is install/execution trust: it tells the agent/user to install and depend on a third-party `gemini-mcp` tool whose exact publisher and official package path are not verified by the evidence, creating a meaningful supply-chain risk. Data flows appear aligned with the stated purpose, with no clear credential harvesting or unrelated exfiltration.