qwen-image

SUSPICIOUS: the skill is coherent as a Pixazo gateway client, but its actual footprint centers on collecting and persisting a Pixazo API key and routing all data through Pixazo rather than an official Alibaba/Qwen endpoint. That third-party credential/data flow, plus raw key file handling and transitive skill-install guidance, makes the skill medium-high risk even without confirmed malware.