pixverse

SUSPICIOUS. The skill's main function is coherent, but it misrepresents the integration as 'Pixverse by Pixverse' while routing credentials and content through Pixazo's gateway instead of PixVerse's official API. Local API-key persistence and wildcard transitive skill installation add medium risk, though there is no confirmed malware or payload execution.