amrouter

SUSPICIOUS: The core gateway behavior is largely consistent with the stated purpose, and the install source appears to be the publisher's own repo. Risk rises because the skill centralizes many provider credentials and, more importantly, advertises automated account creation/key extraction using Playwright, CAPTCHA solving, and temp mail—capabilities that are disproportionate for a normal API gateway and enable high-impact autonomous actions.

No direct malicious payload indicators (e.g., backdoor logic, exfiltration to remote services, reverse shells) are evident in this Bash script. However, the script performs high-impact supply-chain operations: it clones a remote repository and runs npm install/build without pinning or integrity verification, then starts the resulting backend code locally. Additionally, the generated agent templates include an insecure token-like default API key when AMROUTER_KEY is not set, and sed backups may leave sensitive values on disk. Overall, treat this as a generally functional installer with significant supply-chain review and hardening needs rather than as confirmed malware.