ad-image-gen

SUSPICIOUS. The skill’s capabilities mostly match its ad-image purpose, and credential use is proportionate, but it relies on an unseen local generate.py helper and forwards prompts/assets to external image backends whose exact data flows are not verifiable here. This is not clearly malicious, yet the hidden execution component and credential-backed generation path make the overall trust profile medium risk.