ideogram-install-auth

The skill's footprint is coherent with its stated purpose of setting up Ideogram authentication. It installs official SDKs from npm/pip and configures credentials via environment variables or a .env file, then performs a connectivity verification. While generally benign, there is a modest credential exposure risk if secrets leak into logs or are committed to version control; recommend best practices such as ignoring .env files, using secret managers, and ensuring logs do not echo sensitive keys. Overall, the risk profile is low to moderate and proportionate to its purpose.