video-creator

SUSPICIOUS. The publishing/browser automation matches the stated purpose, but the skill’s recommended Jimeng integration depends on an unofficial personal server that asks for browser-derived session credentials and routes data through intermediary services. Playwright MCP is coherent and officially published, yet the combined trust boundary—unofficial credential-bearing video backend plus autonomous public posting—creates high security risk even without confirmed malware.