grok-imagine-video

SUSPICIOUS: the core video-generation behavior is coherent, but the skill routes credentials and user content through Pixazo instead of xAI's official API, stores the key locally for automatic reuse, and includes transitive skill-install guidance. This is not confirmed malware, but it is a medium-risk third-party gateway integration with broader trust implications than the title suggests.