smart-resize

SUSPICIOUS: the core credential use and API workflow fit the stated image-editing purpose, but the skill stores a raw API key locally, hides the exact API endpoint behind a gateway abstraction, and includes a wildcard transitive skill-install instruction unrelated to single-skill operation. No confirmed malware or exfiltration beyond the intended Pixazo API flow.