tripo3d

SUSPICIOUS. The main API workflow is broadly coherent for a Pixazo-hosted Tripo3D integration and does not show malware behavior, but the skill routes access through a third-party gateway, reads/stores raw API keys locally, and includes an unnecessary wildcard transitive skill-install instruction with unverifiable publisher linkage. Overall this looks more like a risky, overreaching integration than confirmed malicious content.