videoagent-image-studio

SUSPICIOUS: the skill’s image-generation purpose is plausible, but its core operation depends on a third-party hosted proxy that intermediates prompts and optional tokens rather than calling official model APIs directly. With no code provided for generate.js or the proxy, the data flow and credential handling are not verifiable, making this a medium-high security risk rather than confirmed malware.