gen-ai-use

SUSPICIOUS: the skill's functionality is coherent with its stated Picsart media-generation purpose, and data flows mostly target official Picsart services. However, the recommended curl|bash installer and especially the documented npm path to a package with a public malicious-package compromise record create high install-trust and credential-forwarding risk.