crystal-upscaler

SUSPICIOUS: the main upscaler workflow is mostly coherent and uses official Pixazo endpoints, but the skill has notable trust issues: it reads and stores raw API keys locally, routes access through Pixazo as a gateway for a third-party model provider, contains a docs mismatch about sync vs async behavior, and includes an unnecessary transitive skill-install command with wildcard scope. Not confirmed malware, but broader and less cleanly scoped than a minimal image-upscaling skill should be.