imagen

SUSPICIOUS: the catalog entry is mostly a redirector, not an image-generation implementation. Its main security issue is instructing installation of an upstream third-party skill from a personal GitHub source, creating transitive trust and moderate supply-chain risk without direct malicious behavior in the entry itself.