media-use

SUSPICIOUS. The skill’s broad media capabilities largely match its stated purpose, and the main HeyGen dependency appears to be an official same-org CLI rather than an unrelated payload. However, the footprint is large, installs several external tools, uses curl|bash, includes a git-clone install path for an optional video tool with weaker provenance, and routes work plus auth through third-party CLIs. This looks like a legitimate but high-trust media workflow skill with notable supply-chain and credential-forwarding risk, not confirmed malware.