p-video

SUSPICIOUS. The core video-generation behavior is mostly coherent, but the skill routes Pruna-branded model usage through Pixazo's third-party gateway, stores the API key in a local plaintext dotfile, and includes a wildcard transitive skill-install recommendation with unconfirmed repo provenance. No confirmed malware or hidden execution was found, but the gatewayed credential/data flow and transitive trust make the skill medium risk.