agent-gen-image

The skill’s stated purpose matches its capabilities, but its trust model is weak: all image operations and provider credentials are funneled through an externally installed CLI from a custom tap with no verification evidence in the skill. That makes this a high-risk supply-chain dependency rather than confirmed malware.