separate-stems-api

SUSPICIOUS. The core network flow to Pixazo's official gateway is plausible, but the skill is internally inconsistent: it is labeled as audio stem separation while instructing image generation/editing behavior and misdescribing the API's response model. It also reads/stores raw API keys in a local file and includes an unrelated wildcard transitive skill-install instruction. No confirmed malware or covert exfiltration is present, but the purpose-capability mismatch and trust-chain expansion make the skill medium risk.