VVVLINK Site Builder

This skill appears to do what it says: it will create a local folder (~/.vvvlink/) for config and generated sites and call publish.vvvlink.com to create/upload/publish sites. Before installing or using it, consider: 1) Trust: the skill will upload content to a third-party service (publish.vvvlink.com) — ensure you trust that service and understand its privacy/retention policies. 2) Local files: it will write ~/.vvvlink/config.json containing your API key (stored with chmod 600 per docs) and site files — back up anything you care about and inspect that directory if desired. 3) API key handling: the skill instructs never to show the apiKey; it is stored in plaintext JSON (file-permissions only). If you require encrypted storage, do not use it or rotate keys after use. 4) Image sourcing: the skill uses an image proxy that returns Unsplash URLs and explicitly instructs not to add photographer credits — this is a policy/attribution concern (not a direct security issue) but may have licensing implications. 5) Auditability: because this is instruction-only, behavior is entirely driven by the SKILL.md; if you want more assurance, test with non-sensitive content or monitor network requests to confirm only the documented endpoints are contacted. If any of these points are unacceptable, do not enable the skill or consult the service owner for more guarantees.