provider-management

SUSPICIOUS: the skill’s purpose is plausible, but its actual auth claims, command surface, and credential storage model do not match official OpenCode or clearly documented vendor workflows. Main risk is disproportionate multi-provider credential collection and possible third-party routing, not confirmed malware.