scenario-ideogram

SUSPICIOUS: the core image-editing behavior is coherent and proportionate for a Scenario/Ideogram skill, with no clear credential theft or exfiltration. The main concern is the explicit transitive installation of sibling skills through an unpinned GitHub repo reference via the skills CLI, which raises supply-chain and trust risk even though the CLI itself appears to be an official npm package.