see

SUSPICIOUS: The skill’s core purpose is coherent for vision fallback, but it persistently alters agent behavior, suppresses honest capability disclosure, and forwards user files and API keys through several third-party provider paths. No direct malware indicators, exploit code, or hidden exfiltration are shown, yet the trust and data-routing footprint is broader than a minimal local OCR helper.