product-photography

SUSPICIOUS. The photography guidance itself is coherent, and the data flow to inference.sh is proportionate, but the skill expands trust by requiring transitive skill installation (`npx skills add ...`) and uses a somewhat mixed publisher path (`belt-sh/cli` vs official inference.sh CLI docs). This looks more like a benign-but-risky integration skill than malware.