qwen-image-2

SUSPICIOUS: The core purpose is coherent for an image-generation skill, and the inference.sh data flow appears broadly consistent with the stated service. The main risks are transitive skill installation, broad shell permissions, and external CLI/shell-installer trust; these make it higher risk than a simple documentation skill, but there is not enough evidence of outright malicious behavior or credential theft.