app-store-screens

SUSPICIOUS: the skill’s capabilities largely fit its stated design purpose, and there is no direct evidence of malware or credential harvesting in the skill text. The main concerns are reliance on third-party Pika MCP infrastructure, remote asset flows, and same-brand but not fully independently verifiable transitive skill installation guidance.