luma

SUSPICIOUS: the core function is coherent, but the skill routes all Luma-related activity through Pixazo's gateway and persists the API key locally, creating a third-party credential/data trust boundary that is not the official Luma API. The wildcard transitive skill install instruction further broadens risk beyond this skill's stated purpose.