portal-router

SUSPICIOUS. The stated purpose matches the behavior—cross-agent discovery and loading—but the trust model is weak because the reference path relies on an unverifiable local CLI and intentionally imports instructions from other skill ecosystems into context. No clear credential theft or exfiltration is shown, so this is not confirmed malware; it is a high-risk transitive-loading and supply-chain exposure.