model-try-on

SUSPICIOUS. The core purpose is coherent, but the recommended data flow routes prompts and API credentials through a third-party OpenAI-compatible proxy instead of official OpenAI infrastructure, and it also suggests unrelated external web links for execution. This is a credential-forwarding and trust-boundary issue, not confirmed malware, but it is higher risk than a normal documentation skill.