imagen

SUSPICIOUS: the skill's purpose is plausible and the visible data flow appears to target Google's official API, but this catalog entry mainly serves as a redirect that asks the user/agent to install an external upstream bundle from a personal GitHub repository. That transitive trust chain and unpinned upstream dependency make the skill moderately risky even without direct evidence of credential theft or malicious exfiltration.