image-workflow

This skill is mostly coherent with its stated image-generation purpose, but it carries medium risk because it installs additional skills transitively and can publish generated content to a public CDN through an unseen local script. The behavior is not fundamentally incompatible with the stated purpose, so it is better classified as suspicious/vulnerable rather than malicious.