orugas-design-studio

SUSPICIOUS. The core capability is coherent for an image-generation skill and the dependency source is official npm, but the skill is internally inconsistent with the cited upstream app's provider, credential, and routing model. Combined with disabled content safety controls, this is better classified as suspicious than benign, though not confirmed malicious.