avatar-builder

Benign. The skill coherently implements offline, deterministic avatar generation with SVG/PNG output and decouples from external credentials or APIs. The primary risk is typical supply-chain risk associated with fetching tools via npm (npx) from registries, but this is standard for development tooling and does not indicate malicious behavior within the described scope.