happy-horse-tvc-video

SUSPICIOUS: The core capability is consistent with a video-generation skill, and the install path is low risk, but the credential and network story is not fully coherent. The skill is branded as Happy Horse yet uses AI_HIVE-specific auth/config and appears to route media and credentials through an intermediary API path that is not clearly justified or documented as the official direct service path.

No malicious code behavior is demonstrated in this fragment because it contains only static configuration. However, it embeds a plaintext API key and an external service base URL, creating a significant credential-leak and unauthorized-access risk if used by surrounding code or if the secret is reused elsewhere. Additional context (how this config is loaded and how requests are made) is required to assess whether the external calls are legitimate and whether the key is scoped/rotated appropriately.