cosmos

SUSPICIOUS: the core API usage is mostly coherent for a Pixazo integration, but the skill collects and persists a reusable API key, routes model access through Pixazo rather than NVIDIA directly, and includes an unverified transitive skill-install suggestion with wildcard scope. No confirmed malware or hidden execution is present, but the trust and credential-handling footprint is broader than a minimal vendor guide.