veo-video

SUSPICIOUS. The stated purpose is plausible, but the skill’s real execution path is opaque: it relies on an undocumented `sr` wrapper with broad Bash permissions and unspecified network endpoints. No direct credential theft or malware behavior is shown, but install trust and data-flow integrity are not sufficiently verifiable from the skill content.