paper-collage-ad-production

SUSPICIOUS/medium risk overall. The skill’s capabilities mostly match its media-production purpose, and the flagged command patterns are documentation-only. The main concern is install trust: the undisclosed setup-indextts2-mlx.sh step appears to fetch TTS runtime/models without enough provenance detail to verify source integrity. Optional API credential use is proportionate and appears directed to named vendors, but the opaque local installer keeps risk above benign.