ip-consistency-lock

SUSPICIOUS: the core purpose is benign and the local file usage is proportionate, but the documented API path is not fully coherent with that purpose because it explicitly allows and recommends routing prompts, reference images, and API keys through a third-party OpenAI-compatible gateway (`tryallapi.com`) instead of the official vendor endpoint. This is not confirmed malware, but it creates meaningful credential-forwarding and data-exposure risk.