qwen-tts

SUSPICIOUS: the core TTS behavior is mostly coherent and uses apparently official Pixazo endpoints, but the skill forwards credentials and content through a third-party gateway, persists the API key locally for automatic reuse, and includes an unrelated wildcard transitive skill-install instruction. No confirmed malware or exploit behavior is present, but the trust and scope are broader than necessary.