scan-large-images

SUSPICIOUS. The stated purpose is benign and the visible behavior is mostly proportionate to local image scanning, with no explicit credential access or network exfiltration. However, the skill’s core functionality depends on an external executable shell script referenced by absolute local path and not provided for review, making the real behavior unverifiable. Under the required scoring rules, that unverifiable executable creates high security risk even without clear malicious intent.