image-processing

SUSPICIOUS. The skill’s purpose and capabilities are consistent with image processing, and there is no sign of credential theft or exfiltration. However, it depends on an unverifiable bundled CLI (`img-process`) with no source or release provenance in the provided content, so the overall risk is high from an install-trust/supply-chain perspective rather than confirmed malicious behavior.