persona-builder

SUSPICIOUS. The skill's capabilities mostly match its stated persona-building purpose, but it has a large privacy and trust footprint: broad social scraping, personal media processing, remote rendering/uploads, and dependence on an external MCP plus transitive skill installation. This looks more like a high-data, high-trust creative workflow than malware, but the external data flows and ecosystem trust chain make it riskier than a narrowly scoped documentation skill.