codex-router-media

SUSPICIOUS: the skill's purpose is coherent and its runtime behavior is narrowly scoped to media generation, but it depends on a community-run router that stores and uses the operator's MiniMax credential and routes requests through third-party code. This is not confirmed malware, but the credential-forwarding and installer trust model create meaningful medium risk.