studio-ghibli

SUSPICIOUS: the core API usage is mostly consistent with an image-generation skill, but the skill misrepresents the provider relationship, conflicts with official async API behavior, overclaims editing capability without matching endpoints, and includes a wildcard transitive skill-install instruction. Not confirmed malware, but medium risk due to intermediary credential routing and trust expansion.