video-craft

SUSPICIOUS. The skill’s main function is benign video-design guidance, but it includes telemetry behavior that is not proportionate to the core purpose and posts data to a config-defined remote endpoint before the skill’s own telemetry prompt. No credential theft or malware behavior is evident, but the data flow is externally directed and weakly bounded, creating medium security risk.