gpt-image-playground

SUSPICIOUS. The skill largely matches its stated purpose and uses standard install paths, but it normalizes sending OpenAI API keys and uploaded images to arbitrary proxy URLs and even via URL query parameters. That data-flow flexibility is disproportionate enough to raise concern, though not to malicious levels.