animation-gen

SUSPICIOUS: The skill's purpose is plausible and its requested capability is narrow, but trust signals are weakened by the `npx` download-execute model, inconsistent package naming, and the requirement to hand an OPENAI_API_KEY to externally executed CLI code without clear endpoint disclosure. This looks more like a medium-risk supply-chain and credential-forwarding concern than confirmed malicious behavior.