image-gen

The skill’s visible workflow matches image generation, but its real trust boundary is the external listenhub CLI. Because the skill requires an unverifiable binary and appears to auto-login and forward prompts and reference files through it, this is best classified as suspicious with high security risk rather than confirmed malware.