claude-typer

SUSPICIOUS: the stated purpose matches video rendering, but the skill routes prompt data through an unverified third-party website and executes remote npm-delivered tooling at runtime. No credential harvesting is evident, yet the combination of third-party remote rendering, mutable network dependency, and command passthrough makes this higher risk than a typical local-only media skill.