generative-media-skills

SUSPICIOUS: the skill’s purpose and capabilities mostly align, but it expands the agent by installing additional remote skills and routes authentication and model traffic through MuAPI rather than official vendor APIs. This looks like a legitimate platform integration, not confirmed malware, but the transitive installation and third-party gateway model create meaningful trust and data-flow risk.