image-upscaling

SUSPICIOUS. The skill’s main behavior matches its stated image-upscaling purpose, but it relies on a broad external CLI with login-based credential forwarding, a pipe-to-shell install path, and transitive skill-install commands. This looks more like a legitimate but higher-trust hosted-service wrapper than outright malware; risk is driven by supply-chain and trust expansion, not clear malicious intent.