xiaohongshu-cover

SUSPICIOUS: The skill’s image-creation purpose is plausible, but its recommended data flow sends prompts, images, and potentially API credentials through third-party proxy services instead of the official model provider. No malware or hidden execution is evident from the provided text, but the non-official endpoints and fallback domain make the trust model weak.