codex-manager-rust

SUSPICIOUS: the skill is broadly consistent with an account-manager/gateway, but it requires handling raw session tokens, running an external service from a different publisher than the skill, and optionally forwarding traffic and keys to third-party upstreams. This is a high-trust proxy tool with meaningful credential and supply-chain risk, not clear malware.