happyhorse

SUSPICIOUS. The skill's stated video-generation purpose is plausible, but its primary install step is inconsistent with the official inference.sh Belt CLI and could route logins and media through an unrelated tool. The same-org docs for Belt look legitimate, so this is better explained as a dangerous install mismatch than confirmed malware, but the credential-forwarding and transitive-install risks make the skill high risk.