video-audio

SUSPICIOUS: the stated capability fits the skill’s purpose, but it relies on a newly published third-party CLI with weak provenance and unclear data flows. No direct credential theft or malicious behavior is shown, yet the external-tool trust story is incomplete enough to keep risk at medium.