codeformer

SUSPICIOUS: the core behavior mostly fits an image-restoration skill, but it routes credentials and user image data through Pixazo's gateway rather than an official CodeFormer service, stores the API key in a local file, and includes an unrelated wildcard skill-install instruction. This is not confirmed malware, but it has moderate security risk due to third-party credential/data routing and transitive trust.