promo-video

SUSPICIOUS: The core video-generation behavior is broadly consistent with the stated purpose, but the skill raises medium risk because it installs other skills, uses several unpinned remote install paths, and asks the user to place an API key in a local `.env` for an unseen helper script. The footprint is not fundamentally incompatible with the purpose, so this is not confirmed malicious.