ai-avatar-video

The skill’s core capability fits its stated purpose, and the primary data flow to inference.sh appears proportionate. However, it is still suspicious overall because it requires transitive installation of another skill, uses mutable raw-GitHub install documentation, and the `belt-sh/cli` publisher relationship is not clearly verifiable from the provided evidence; this is more a supply-chain and trust-boundary issue than confirmed malicious behavior.