ai-product-photography

SUSPICIOUS: the core purpose is coherent and data appears to flow to the official inference.sh platform, but the skill expands trust through external CLI installation, wildcard CLI permissions, and explicit transitive skill installation. This looks more like medium supply-chain and trust-boundary risk than confirmed malicious behavior.