gpt-image-2-product-detail-page

SUSPICIOUS: the skill’s broad capability matches its stated image-generation purpose, and the visible install step is low-risk, but trust is reduced because prompts, images, and API credentials are routed to an external AI Hive service whose official API documentation and ownership relationship were not clearly verifiable from the supplied evidence.

No malicious code behavior is demonstrated in this fragment because it contains only static configuration. However, it embeds a plaintext API key and an external service base URL, creating a significant credential-leak and unauthorized-access risk if used by surrounding code or if the secret is reused elsewhere. Additional context (how this config is loaded and how requests are made) is required to assess whether the external calls are legitimate and whether the key is scoped/rotated appropriately.