labflow

SUSPICIOUS: the skill’s purpose matches its media-generation actions, but it relies on an unofficial CLI and instructs use of a live Google session cookie with third-party code. No clear malicious endpoint is shown, yet the credential-handling model and external tool trust make this a high operational security risk.