img-to-html

SUSPICIOUS. The skill’s core purpose is coherent, and the scanner’s command-injection findings are false positives from markdown notation. However, the skill delegates to another skill and forwards `OPENROUTER_API_KEY` plus user image data through an unverifiable local helper script, with no pinned provenance or official release trail. That makes the main risk credential forwarding and transitive trust, not confirmed malware.