image-assistant

SUSPICIOUS: the visible skill purpose is mostly coherent for prompt planning and image generation, but it likely forwards user content and API credentials to APIMart, a third-party gateway, and the key API/script files are not provided for verification. No direct malware indicators or unsafe installers are visible, but the external data flow and unseen credential-handling logic raise moderate risk.