video-scriptwriting

SUSPICIOUS. The main scriptwriting guidance is benign, but the companion-check behavior is not well aligned with the skill’s purpose: it enumerates local skill directories and encourages transitive installation of third-party skills via an unpinned `npx` flow. No clear credential theft or malicious payload is shown, but the install chain adds meaningful security risk beyond normal video-script assistance.