youtube-shorts-generator

SUSPICIOUS. The skill’s capabilities mostly match its stated purpose, but it depends on cloning and executing a third-party GitHub repo and sends user media/transcript data plus an API credential into an external MuAPI-centered pipeline. This looks more like a medium-risk hosted media-processing skill than confirmed malware, with the main concerns being supply-chain trust and external data handling.