gfpgan

SUSPICIOUS. The main API use is broadly coherent with the stated purpose and appears to target official Pixazo domains, but the skill routes credentials and image data through Pixazo rather than directly to TencentARC, persists the API key locally, and contains a wildcard transitive-skill install instruction unrelated to the core task. The mismatch between the skill's claimed synchronous flow and Pixazo's documented async API also reduces trust in the instructions.