freeimg-hunyuan

SUSPICIOUS. The core local skill behavior is mostly coherent for Tencent image generation, and the SDK provenance is official npm/Tencent. The main issue is the companion web app: it is a personal domain outside Tencent, yet the skill encourages users to enter full Tencent Cloud credentials there, creating a third-party credential forwarding path unrelated to the official API flow.