backend

SUSPICIOUS: the parent router is mostly consistent with its stated routing purpose, but it instructs transitive installation of external skills through a local installer whose provenance and fetch behavior are not reviewable here. The main risk is supply-chain and inherited trust, not direct credential theft or overtly malicious behavior in this file.