video-cut-api

SUSPICIOUS: the core Pixazo API call is mostly aligned and same-org, but the skill is internally inconsistent about video cutting vs image generation, instructs the agent to read/store raw API keys, and includes a wildcard transitive skill-install command from an unverified target. This is not confirmed malware, but it has meaningful security and trust concerns.