fal-ai-media

SUSPICIOUS. The skill’s stated media-generation purpose is coherent, but its main execution path relies on an unpinned `npx` MCP package that the provided evidence does not verify as an official fal.ai distribution. Because the skill passes `FAL_KEY` into that executable and can upload local files through it, the trust and data-flow model are disproportionate to the available provenance evidence.