api-gateway

SUSPICIOUS. The skill is internally consistent as a third-party API gateway, but its core design places Maton in the middle of authentication and API traffic for many external services. That broad proxy model is not malware and lacks installer abuse, yet it carries medium-high security risk because sensitive data and powerful actions flow through a non-official intermediary domain.